utls-light
libcurl
utls-light | libcurl | |
---|---|---|
1 | 303 | |
24 | 34,487 | |
- | 0.9% | |
2.9 | 9.9 | |
3 months ago | 6 days ago | |
Go | C | |
BSD 3-clause "New" or "Revised" License | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
utls-light
-
Planning Go 1.20 Cryptography Work
This kind of flexibility is a non-goal of crypto/tls. We have a TLS stack with one of the best security track records because we implement an opinionated subset of the specification, amongst other things. Moreover, fingerprint evasion is a cat-and-mouse game we can't sustain in the six months Go release cycle.
That doesn't mean I don't care! I was just talking with a friend about this the other day, and I suggested it should be possible to make a small, easily maintained patch that focuses on chasing the fingerprint of one well-known browser. He implemented https://github.com/hellais/utls-light in that spirit, which looks like a viable solution to me.
Anyway, I think matching TLS fingerprints to HTTP User-Agent strings is a valid abuse prevention technique. Rejecting any non-browser fingerprint is bad, and websites should get pushback for that, but I am skeptical that's something they can reliably do without breaking any time Chrome flips a field study. TLS is not _that_ rusted shut.
libcurl
-
Caching RESTful API requests with Heroku’s Redis Add-on
Then, in another terminal window, we use curl to hit the endpoint:
-
Verified Curl
Made a PR to curl in line with the above: https://github.com/curl/curl/pull/13338
- Kelsey Hightower: Developers, what marketing strategies work on you?
-
Open source at Fastly is getting opener
Through the Fast Forward program, we give free services and support to open source projects and the nonprofits that support them. We support many of the world’s top programming languages (like Python, Rust, Ruby, and the wonderful Scratch), foundational technologies (cURL, the Linux kernel, Kubernetes, OpenStreetMap), and projects that make the internet better and more fun for everyone (Inkscape, Mastodon, Electronic Frontier Foundation, Terms of Service; Didn’t Read).
- Bruno
- Apple curl security incident 12604
-
"The issue was detected by our new AI-powered vulnerability scanner"
From the GitHub Issue itself, the maintainer did end up creating a PR to fix a related issue: https://github.com/curl/curl/issues/12983
Also, the bot filed another issue despite the complaints.
-
pyaction 4.28.0 Released
This Docker image is designed to support implementing Github Actions with Python. As of version 4.0.0., it starts with the official python docker image as the base which is a Debian OS. It specifically uses python:3-slim to keep the image size down for faster loading of Github Actions that use pyaction. On top of the base, we've installed curl gpg, git, and the GitHub CLI. We added curl and gpg because they are needed to install the GitHub CLI, and they may come in handy anyway (especially curl) when implementing a GitHub Action.
- Would Rust secure cURL? (2021)
- Curl HTTP/3 Performance
What are some alternatives?
Boost.Beast - HTTP and WebSocket built on Boost.Asio in C++11
C++ REST SDK - The C++ REST SDK is a Microsoft project for cloud-based client-server communication in native code using a modern asynchronous C++ API design. This project aims to help C++ developers connect to and interact with services.
POCO - The POCO C++ Libraries are powerful cross-platform C++ libraries for building network- and internet-based applications that run on desktop, server, mobile, IoT, and embedded systems.
Simple-WebSocket-Server
cpp-httplib - A C++ header-only HTTP/HTTPS server and client library
cpr - C++ Requests: Curl for People, a spiritual port of Python Requests.
libwebsockets - canonical libwebsockets.org networking library
Mongoose - Embedded Web Server
cpp-netlib - The C++ Network Library Project -- cross-platform, standards compliant networking library.
WebSocket++ - C++ websocket client/server library
aria2 - aria2 is a lightweight multi-protocol & multi-source, cross platform download utility operated in command-line. It supports HTTP/HTTPS, FTP, SFTP, BitTorrent and Metalink.
Muduo - Event-driven network library for multi-threaded Linux server in C++11