4 ms·

Question: Wouldn't it just be easier for Emacs to link to libcurl which has pretty much reasonable defaults (afaik, correct me if I'm wrong). The result would b

by etu 8y ago

Question: Wouldn't it just be easier for Emacs to link to libcurl which has pretty much reasonable defaults (afaik, correct me if I'm wrong). The result would be that Emacs wouldn't need to link to a specific TLS library or have to maintain this. libcurl's API has a good reputation for not breaking :-) Also big thanks for putting this work into Emacs. I use Emacs for hours at least every work day and many non-workdays as well.

wyuenho 8y ago
I thought about linking in curl, but curl doesn't seem to offer any help in making OCSP requests separately, it only has support for OCSP stapling. Not that not having OCSP by itself is a major issue, but not having OCSP, CT and a reliable and complete CRL set to check for certificate revocations is. Since GnuTLS is a readily available, and has APIs that make OCSP requests and verify OCSP responses, and Emacs itself can already open network sockets, in the end I've decided to stick to a bunch of Lisp and a couple of simple C functions for GnuTLS.
__david__ 8y ago
Emacs uses TLS for more than just HTTP. SMTP+STARTLS for instance…
- oblio 8y ago
  You were saying: https://stackoverflow.com/questions/14722556/using-curl-to-send-email https://stackoverflow.com/questions/14722556/using-curl-to-s...? :D
  - __david__ 8y ago
    Fair enough, but does it do nntp, irc, pop, imap, jabber, etc? Emacs (for better or worse) has a complete network API so people can implement all of these things, and it doesn't want to be limited by a high-level library that only supports some small subset (however large that subset is).
    - oblio 8y ago
      If you push hard enough...: https://curl.haxx.se/mail/lib-2012-02/0234.html https://curl.haxx.se/mail/lib-2012-02/0234.html :)
simcop2387 8y ago
As far as I know you can't use libcurl to talk to smtp, or other protocols like that. They need generic socket support.
- oblio 8y ago
  I see SMTP here: https://curl.haxx.se/libcurl/c/smtp-mail.html https://curl.haxx.se/libcurl/c/smtp-mail.html And on their page they have a zillion protocols: https://curl.haxx.se/ https://curl.haxx.se/ Maybe it would be worth trying out.

by etu 8y ago

wyuenho 8y ago

I thought about linking in curl, but curl doesn't seem to offer any help in making OCSP requests separately, it only has support for OCSP stapling. Not that not having OCSP by itself is a major issue, but not having OCSP, CT and a reliable and complete CRL set to check for certificate revocations is. Since GnuTLS is a readily available, and has APIs that make OCSP requests and verify OCSP responses, and Emacs itself can already open network sockets, in the end I've decided to stick to a bunch of Lisp and a couple of simple C functions for GnuTLS.

__david__ 8y ago

Emacs uses TLS for more than just HTTP. SMTP+STARTLS for instance…

oblio 8y ago
You were saying: https://stackoverflow.com/questions/14722556/using-curl-to-send-email https://stackoverflow.com/questions/14722556/using-curl-to-s...? :D
- __david__ 8y ago
  Fair enough, but does it do nntp, irc, pop, imap, jabber, etc? Emacs (for better or worse) has a complete network API so people can implement all of these things, and it doesn't want to be limited by a high-level library that only supports some small subset (however large that subset is).
  - oblio 8y ago
    If you push hard enough...: https://curl.haxx.se/mail/lib-2012-02/0234.html https://curl.haxx.se/mail/lib-2012-02/0234.html :)

simcop2387 8y ago

As far as I know you can't use libcurl to talk to smtp, or other protocols like that. They need generic socket support.

oblio 8y ago
I see SMTP here: https://curl.haxx.se/libcurl/c/smtp-mail.html https://curl.haxx.se/libcurl/c/smtp-mail.html And on their page they have a zillion protocols: https://curl.haxx.se/ https://curl.haxx.se/ Maybe it would be worth trying out.