Encapsulating trust

[Daniel Murphy via Digitalmars-d]

"Dmitry Olshansky"  wrote in message news:lu4j4v$leu$1 at digitalmars.com...

> Making things ugly doesn't make them safe or easier to verify.
> Somehow people expect the opposite, but just take a look at e.g. OpenSSL 
> :)

No, but making unsafe code ugly makes the safe alternatives look more 
attractive, and hopefully more likely to be used.  It also makes the unsafe 
code stand out more, so it is less likely to be overlooked.

> Slapping @trusted across whole functions just blurs the scope of system 
> code (where? what was system? or maybe it's that pointer ... it's really 
> hard to analyze afterwards).

Nobody is suggesting this.