curl and new technologies

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

curl and new
technologies

March 5, 2013

Daniel Stenberg
●
Free Software
●
Network hacker
●
Embedded developer
●
Consultant

Email: daniel...

Before

Now

Then

How?

Questions?

Interrupt!

What is curl?
●
curl and libcurl
●
Transfer data using application
protocols

Put in more words
curl is a command line tool for transferring data
with URL syntax, supporting DICT, FILE, FTP, FTPS,
G...

500 million
users

Really 500 million users?
●
Mac OS X ●
PHP sites
●
TVs ●
...

One day 15 years ago...
●
Scratched an itch

Contributors over time
●
1000+ in total
●
Increasing linearly

Number of committers
●
74 unique within 12 months
●
125 within 24
●
174 within 36

Mailing lists
●
4900 mails during 2012
●
curllibrary has 1300+ subscribers

Lines of code

Bug reports
●
Not counting them sent per mail
●
~1200 submitted during 13 years
●
one new report every 4th day

>130 companies use curl
bl a Adobe, AOL, Apple, Blizzard, CERN,
Cisco, Electronic Arts, Facebook,
Garmin, Google, IBM, L...

42 bindings
Ada95, Basic, C++, Ch, Cocoa, D, Dylan,
Eiffel, Euphoria, Falcon, Ferite, Gambas,
glib/GTK+, Guile, Haskell,...

131 releases
●
bimonthly release cycle

16 security problems
●
Security is hard
●
Problems are unavoidable
●
Deal with them properly

It is personal
I've given this project some 10000
spare time hours, I started it, I lead
it, I've done the design and mo...

How does it run?
●
Volunteers
●
Reviews by mail
●
Mailing list driven
●
Test suite and autobuilds
●
Sm...

When is it done?
●
How long is a rope?
●
When is the last bug found?
●
When do we stop adding
functionali...

New Technology
●
Internet, protocols and file
transfers evolve
●
Curl has to evolve along
●
You can help!

Happy Eyeballs
●
Dualstack behaviors
●
RFC6555
●
Basically two connect attempts
at once

DANE
●
DNSBased Authentication of
Named Entities (DANE)
●
RFC6698
●
Because SSL's CA system is
brok...

SRV/URI records
●
DNS based hints to find (web)
servers
●
In use by nonHTTP protocols
●
Latency penaltie...

HTTP pipelining
●
Present in HTTP 1.1, RFC2616
●
Riddled with server problems
●
Circumvents latency issues
●
...

HTTP2 (SPDY)
●
Discussed in IETF's httpbis WG
●
Based on SPDY/3
●
SCTP and SSH like with multiple
streams...

New HTTP auth
●
Passwords must die
●
Existing auth methods are full of
problems
●
Digest relies on MD5
●
...

SSL to proxy
●
SSL over proxy is usually done with
a HTTP CONNECT over plain HTTP
●
Increase privacy within
...

… and much much more!
●
It never ends
●
Transports are fundamental to
Internet
●
curl transports the Inte...

How?
●
Companies fund features
●
Individuals fix problems

●
Join us and help out!

Thank you

Daniel Stenberg <daniel@haxx.se>

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

Top clipped slide

View on SlideShare

1 of 32 Ad

1 of 32 Ad