> The library code would however not be affected with this, as I hope, believe
> and expect libcurl users to be more aware of these issues.
I fail to see how that expectation would hold up. Many "libcurl users" are
actually just users of the package which includes libcurl, and may not be
totally aware of the details of curl or libcurl at all (just the interface that
the developer who made use of libcurl decides to give them). These folks are
just as much at risk as a "curl user". I think it is important to remember that
not all users of packages such as these are programmers (or even very
technically savy). As such, the proper approach seems to be more one as outlined
in earlier notes (Cris's?) I read here, specificly to produce errors and fail
the request when the ssl certs validity can not be established.
Peace. -njg

-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone? Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
Received on 2002-08-22