On 03/17/2014 11:11 AM, Amos Jeffries wrote: > This is the patch making libnettle mandatory dependency and dropping > completely the bundled MD5 implementation.
Why the bundled MD5 implementation should removed? Is there any reason? Adding (mandatory) depedencies to external libraries, which are not required, I believe is not in right direction. A such library maybe is required for a software uses a number of cryptographic algorithms, but I am not seeing any reason for squid, which uses only an md5. The only reason is a little faster md5 implementation, but for the users this is required, the libnettle (and openssl if we copy md5.c from squid2.6) can be an alternate. Regards, Christos > > Amos >
