unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
19000 curl commits
自宣布完成18,000次提交以来已过去387天,现完成第19,000次提交。curl项目中其他贡献者的活跃度提升,导致个人份额减少。平均每月有8位新贡献者加入。预计24个月内将达2万次。...
2025-3-14 12:39:16 | 阅读: 41 |
收藏
|
daniel.haxx.se - daniel.haxx.se
387
thousand
personally
nowadays
My cookie spec problem
文章讲述了RFC 6265对Cookie规范的改进及其影响。作者回顾了Cookie从混乱到有序的过程,并提到自己参与制定规范的经历。他指出Set-Cookie头信息的双重语法定义存在问题,并尝试推动修订但未成功。尽管如此,他认为当前规范仍有效,并计划继续提出改进建议。...
2025-3-1 17:0:44 | 阅读: 5 |
收藏
|
daniel.haxx.se - daniel.haxx.se
client
6265
agree
twice
Adding curl release candidates
curl项目计划在发布周期中引入发布候选版本(release candidates),以帮助更早发现回归问题。每个版本将包含三个RC阶段:rc1在特性冻结时发布,rc2在rc1之后九天发布,rc3在正式发布前一周发布。用户被鼓励测试这些候选版本并报告问题。...
2025-2-28 10:22:7 | 阅读: 14 |
收藏
|
daniel.haxx.se - daniel.haxx.se
candidates
candidate
regressions
ship
bugfixes
The curl roadmap webinar 2025
2025年3月6日18:00 UTC将举办curl roadmap网络研讨会,讨论2025年计划功能并收集反馈。活动通过Twitch直播和Zoom进行,Zoom需提前注册。参与者可提问和评论。...
2025-2-25 08:5:56 | 阅读: 21 |
收藏
|
daniel.haxx.se - daniel.haxx.se
roadmap
twitch
talking
truly
minds
A second curl distro meeting 2025
2025年4月10日将举办第二届"curl + 发行版"线上会议,旨在提升curl在各发行版中的表现。会议面向curl开发者与发行版维护者,通过讨论与合作推动改进工作。参与者可在专属Wiki页面添加议题并报名参加。...
2025-2-24 07:32:16 | 阅读: 6 |
收藏
|
daniel.haxx.se - daniel.haxx.se
meeting
distro
distros
outcomes
developers
curl website traffic Feb 2025
curl.se网站过去一个月处理了62.95 TB带宽和124.3亿次请求,平均每次请求大小为5568字节。主要下载内容为curl tarball文件(约112万次),但仅占总流量不到10%。99.77%的请求由CDN处理,北美、欧洲和亚洲分别占48%、24%和22%的带宽。推测大量流量来自CA证书下载或其他机器通信。...
2025-2-22 22:36:51 | 阅读: 7 |
收藏
|
daniel.haxx.se - daniel.haxx.se
fastly
download
bandwidth
served
gigabytes
Changing every line three times
文章探讨了软件开发中代码修改的频率与质量的关系。以开源项目curl为例,分析显示其平均每行代码被修改约3.5次,反映了持续优化和维护的过程。...
2025-2-18 14:7:43 | 阅读: 6 |
收藏
|
daniel.haxx.se - daniel.haxx.se
ten
counting
talking
edited
comparing
OpenSSL does a QUIC API
文章讨论了OpenSSL决定自研QUIC协议栈及其API与社区预期的不同之处。尽管curl项目支持了OpenSSL的QUIC实现,但因性能和资源问题将其标记为实验性质。ngtcp2作为独立于TLS库的通用QUIC栈表现更优。文章指出,尽管OpenSSL 3.5版本可能带来变化,但能否真正推动HTTP/3普及仍存疑。...
2025-2-16 13:5:34 | 阅读: 18 |
收藏
|
daniel.haxx.se - daniel.haxx.se
ngtcp2
stacks
library
proposed
curl 8.12.1
这是一个针对libcurl 8.12.0版本中出现的多个问题而发布的快速补丁更新。修复了65个bug,涉及TLS升级、依赖库支持等问题,并优化了文档和测试脚本。此次更新未引入新功能或安全修复。...
2025-2-13 07:23:6 | 阅读: 8 |
收藏
|
daniel.haxx.se - daniel.haxx.se
asyn
httpsrr
bugfixes
runtests
sponsors
disabling cert checks: we have not learned much
文章讲述了SSL/TLS证书验证的重要性及其在curl中的实现。默认情况下,curl自2002年起验证服务器证书以确保连接安全。不验证证书可能导致中间人攻击。尽管存在API设计批评和滥用案例(如GitHub上的14万次禁用),但作者强调持续推动正确使用以保障安全。...
2025-2-11 15:0:7 | 阅读: 20 |
收藏
|
daniel.haxx.se - daniel.haxx.se
curlopt
disabling
verifypeer
verifyhost
verifying
curl 8.12.0
这篇文章介绍了curl项目的最新版本8.12.0的发布信息,包括发布时间、新增功能、安全修复及改进内容,并提到下一版本8.13.0的计划发布时间为2025年4月2日。...
2025-2-5 08:24:3 | 阅读: 14 |
收藏
|
daniel.haxx.se - daniel.haxx.se
netrc
overflow
bugfixes
etag
curlopt
European Open Source Achievement Award
I have been awarded the European Open Source Achievement Award! Proud,...
2025-2-3 14:32:19 | 阅读: 21 |
收藏
|
daniel.haxx.se - daniel.haxx.se
european
academy
award
awards
president
A 1337 curl author
For quite some time now, I celebrate and welcome every new commit autho...
2025-1-29 07:59:2 | 阅读: 22 |
收藏
|
daniel.haxx.se - daniel.haxx.se
1337
celebrate
persons
seven
mastodon
CVSS is dead to us
CVSS is short for Common Vulnerability Scoring System and is according to Wikipedia a technical...
2025-1-23 10:43:1 | 阅读: 19 |
收藏
|
daniel.haxx.se - daniel.haxx.se
security
nvd
calculator
cves
scores
Presentation: curl from start to end
On Tuesday January 21st 2025, at 16:00 CET (15:00 UTC) I will do a pres...
2025-1-16 20:2:29 | 阅读: 19 |
收藏
|
daniel.haxx.se - daniel.haxx.se
streamed
youtube
tuesday
cet
titled
Secure Transport support in curl is on its way out
In May 2024 we finally decided that maybe the time has come for curl to...
2025-1-14 07:20:8 | 阅读: 19 |
收藏
|
daniel.haxx.se - daniel.haxx.se
network
library
deprecation
flavors
shipped
curl with partial files
Back in September 2023, we extended the curl command line tool with a n...
2024-12-30 09:46:15 | 阅读: 15 |
收藏
|
daniel.haxx.se - daniel.haxx.se
expand
daniel
pwd
offsets
hundred
dropping hyper
The ride is coming to an end. The experiment is done. We tried, but we...
2024-12-21 10:52:53 | 阅读: 8 |
收藏
|
daniel.haxx.se - daniel.haxx.se
backends
library
memory
sean
A twenty-five years old curl bug
I have talked about old curl bugs before, but now we have a new curl re...
2024-12-12 17:18:34 | 阅读: 9 |
收藏
|
daniel.haxx.se - daniel.haxx.se
security
mistakes
mistake
eyeballs
shallow
curl 8.11.1
Welcome to another curl release. This time we do a bugfix only release,...
2024-12-11 15:14:16 | 阅读: 17 |
收藏
|
daniel.haxx.se - daniel.haxx.se
netrc
exclusive
bugfixes
libssh
mutually
Previous
3
4
5
6
7
8
9
10
Next