Re: Thoughts on HSTS

On Mon, 31 Aug 2020, Daniel Stenberg via curl-library wrote:

> I've started to work on an implementation for curl and while doing so, I've
> put down some ideas in the wiki on how to interface this from curl and
> libcurl. I'm interested in feedback:
>
> https://github.com/curl/curl/wiki/HSTS

Just a FYI: I've now also started to work on callbacks for reading/writing the
entries to/from an application without using a file. For example this allows
an application to preload a set of hosts very easily.

If this sounds like something you'd be interested in, give it a look and see
if you can find any obvious flaws in the current API/design. You find the
current work in progress here:

   https://github.com/curl/curl/pull/5896

HSTS support will of course first be merged as "experimental" which will allow
us to adjust it as we go, but the earlier we get feedback and general
improvement ideas, the better the result can get.

My thinking is to get this merged in the *next* feature window, thus probably
in the 7.74.0 release.

-- 
  / daniel.haxx.se | Commercial curl support up to 24x7 is available!
                   | Private help, bug fixes, support, ports, new features
                   | https://www.wolfssl.com/contact/
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html