Re: [PATCH] www/curl certbundle and missing dep

["Dr. Thomas Orgis" <thomas.orgis%uni-hamburg.de@localhost>]

Am Sun, 15 Nov 2020 15:36:35 +0100
schrieb Thomas Klausner <wiz%NetBSD.org@localhost>: 

> On Sun, Nov 15, 2020 at 02:31:21PM +0100, Dr. Thomas Orgis wrote:
> > www/curl pulls libpsl out of the host system if it can, so I just added
> > an explicit dependency to handle that.  
> 
> Is this a useful dependency?
> How big is it, how much else does it pull in?

On my distro it uses the meson build with ninja … whyever … pkgsrc uses
the autoconf one. Extra dependencies include python and icu. Icu could
be a showstopper for minimal people.

About the usefulness … I've read https://github.com/rockdaboot/libpsl

	A Public Suffix List is a collection of Top Level Domains
	(TLDs) suffixes. TLDs include Global Top Level Domains (gTLDs)
	like .com and .net; Country Top Level Domains (ccTLDs) like .de
	and .cn; and Brand Top Level Domains like .apple and .google.
	Brand TLDs allows users to register their own top level domain
	that exist at the same level as ICANN's gTLDs. Brand TLDs are
	sometimes referred to as Vanity Domains.

	Browsers, web clients and other user agents can use a public suffix list to:

	avoid privacy-leaking "supercookies" avoid privacy-leaking
	"super domain" certificates (see post from Jeffry Walton)
	domain highlighting parts of the domain in a user interface
	sorting domain lists by site

Hm. Seems marginally useless for something like curl.

> We could always just disable the detection, either using a configure
> flag if it exists or by overriding the autoconf detection symbol.

Might be a better alterative. Now … do you think it should be an option
or just --disabled in Makefile?


Alrighty then,

Thomas

-- 
Dr. Thomas Orgis
HPC @ Universität Hamburg