[Daniel's week] June 27, 2025

[Daniel Stenberg]

Hello friends.

It's been a while! Two weeks off and then I'm writing this up while on a
conference trip to the Netherlands so it is a shorter-edition-than-usual this
week.

## vacation

My vacation trip with the family was awesome. Sun, good food, wine, kayaking
in the Mediterranean sea and spending time with people I love. Fantastic!

## NETRC

Someone emailed the libcurl mailing list and pointed out that curl does not
support the NETRC environment variable when it is told to use the .netrc file,
while apparently there is nowadays a range of other tools and libraries that
do. I have created an initial PR for this, but it was too late for this
feature window so maybe this can get merged for 8.16.0.

## rc1

The short feature window this cycle has been closed again and I uploaded the
rc1 build of the coming 8.15.0 release. So far only minor regressions have
been reported on this. I suppose the fact that we did not merge very many
features this time also helps reducing the risk for regressions.

## dropped TLS libs

The single but fairly big change that was merged in time before the rc1 build,
as the removal of support for the TLS backends Secure Transport and BearSSL.
This event has been informed about repeatedly for well over six months so it
should not be a surprise to anyone, but yet I expect this to a cause some
raised eyebrows or even complaints when this release gets used for real out
there.

We have seen some work show up on adding support for the native CA store on
Apple operating system for other TLS backends so I expect that to happen in
the not so distant future, and that should probably make most former users of
the Secure Transport backend happy.

## Joy of Coding

I spoke at the Joy of Coding conference in the Netherlands today and it was a
blast. A single-track conference with a 150 something attendees. I titled my
talk "accidental world domination for fun" and talked about how curl came to
be, with the angle of explaining how anyone can do Open Source and that a
major part of it is to make sure to have fun doing it.

## family of forks

I have for a while felt the need to explain to interested parties what it
takes to support the different OpenSSL forks in curl and a little bit about
how the differentiate from each other so I wrote a blog post about it this
week. Details next to one actually needs to know or care about but now I've
written them down!

## security

We have had a range of new security reports filed over the recent weeks but so
far every single one of them have been found to be either just nothing to
mention or just "ordinary" bugs. Also, the number of AI slop reports seems to
have died down a little. A temporary thing or a trend? We'll see.

## Coming up

- Monday curl 8.15.0-rc

## Links

Sorry, I'm on the road so I decided to not collect all the links this week.
Google them.

-- 

  / daniel.haxx.se