"my experience from working with them on and off for many months now is nothing but good. Skilled, professional engineers without any bureaucracy. They know their stuff, and they've been very good at listening in and adjusting for our needs and wants."
I only record the introduction commit for security flaws as they are rare and important enough to give that level of attention. And that's not a mandatory or required step in our process, I do it mostly as a service for users and to satisfy my own curiosity.
Thanks everyone for the positiveness and expression of appreciation I've sensed here. The threat has been reported to the police and I'll move on. I love you all. Now I'll go back and continue working on curl.
I rather refrain from speculating as I truly have no idea! As I describe in my blog post, I just got an email saying "someone" had logged into my account from a new device and then I was kicked out (as that user then changed password and email presumably).
Thanks! Captive portals are indeed truly complicated beasts to handle and they offer challenging obstacles for browsers (and others). We keep working on trying to improve how Firefox detects and works with them.
"I better speculate on the reason here because surely Daniel is part of a conspiracy meant destroy the browsing experience of millions"
or...
It could be prepared for when the user gets asked what they want and then Firefox can remember an explicit "no" as compared to not selection ever made.
c-ares is not standard because making a drop-in replacement for the regular stock name resolver function is really hard and c-ares is not 100% there. A c-ares powered libcurl fails to resolve some host names in some setups that otherwise work with the stock resolver (and thus in other apps/libraries). That's why the threaded stock resolver is the most popular resolver backend of curl/libcurl these days...
"my experience from working with them on and off for many months now is nothing but good. Skilled, professional engineers without any bureaucracy. They know their stuff, and they've been very good at listening in and adjusting for our needs and wants."
Who am I? I'm Daniel, curl lead developer.
https://mastodon.social/@bagder/116807425534711479