> What do you mean, with GIO, with libsoup, with anything? If it doesn't work 
> neither on macos not Windows, it starts to feel like nobody is gonna be using 
> it 😆

Yeah, it was with libsoup which, when using gtk-osx for building dependencies, 
depends on gnutls:

https://gitlab.gnome.org/GNOME/gtk-osx/-/blob/master/modulesets-stable/gtk-osx-network.modules?ref_type=heads#L240

But yeah, the situation may really be different with gio because the package 
has no such dependency - I'll try.

> @techee you don't want to be shipping TLS, that should be using a system 
> library, the last thing you need is to be constantly updating as CVEs are 
> fixed against it. If it doesn't use a system library then it shouldn't be 
> available.

Probably not, but in this case when it's used only for this plugin (and I 
believe geniuspaste too), it wouldn't be so horrible even if there were some 
security issues. Both plugins connect to trusted domains, don't transfer any 
secrets, and I don't expect there are many attackers eager to pretend there's a 
new Geany release ;-).


-- 
Reply to this email directly or view it on GitHub:
https://github.com/geany/geany-plugins/pull/1340#issuecomment-2081520824
You are receiving this because you are subscribed to this thread.

Message ID: <geany/geany-plugins/pull/1340/c2081520...@github.com>

Reply via email to