Memory safe ‘curl’ for a more secure internet

Re:Memory safe ‘curl’ for a more secure internet by weinzierl on Friday October 09, 2020 @12:32PM (#24731603)

Not depependin on OpenSSL is kind of the point of the original post if I understand it correctly.

Also I find the dependency on OpenSSL one major pain in my Rust projects. When you want to build a statically linked binary you need to supply a statically built OpenSSL and if your distro doesn't come with one (like Ubuntu) you are on your own. Yes, there is a Docker container that comes with all the prerequisites but I think that's a bit heavy for my purposes.

I wish there was a single switch in Cargo.toml and every dependency would automagically use rustls.

[ Parent | on HN ]

Re:Memory safe ‘curl’ for a more secure internet by hirako2000 on Friday October 09, 2020 @01:08PM (#24732014)

Containers is becoming the way to build stuff, partly for that reason.

I think any dependency adds a level of burden, but some things are better delegated to library. I think crypto is a good case, btw I think OpenSSL is not the only one lib for TLS with curl.

[ Parent | on HN ]

Re:Memory safe ‘curl’ for a more secure internet by weinzierl on Friday October 09, 2020 @01:33PM (#24732304)

> Containers is becoming the way to build stuff, partly for that reason.

This sits wrong with me, but thinking about it: I rewrote the sentence about containers in my comment three times before posting it and it still doesn't sound compelling. Maybe you have a point here.

[ Parent | on HN ]