Re: Windows Peer Verification

On Mon, Feb 3, 2014 at 7:46 PM, Daniel Lowrey <rdlowrey@gmail.com> wrote: > The only real question here is this: > > ***** Should we ship a CA file? ***** > > Personally, I say no. If people are going to programmatically use encrypted > stream transfers they need to at the very least understand the basics of the > CA system. We shouldn't subsidize insecurity, and it's trivially easy to > procure a CA file. We should for the windows binaries and use a script to update it. This script should be part of the src distros. I have added the curl ca cert file option because many users requested it. It is very handy to have the ability to get a uptodate certs file, especially when the OS one is outdated and cannot be updated (yes, it happens :). Cheers, -- Pierre @pierrejoye | http://www.libgd.org