I hear that attempts to backport curl patches have been made difficult by all my refactoring and that distros decided to upgrade the complete curl for you instead.

I am sorry about the time wasted, but not the outcome.😬

@icing @bagder “Be liberal in what you accept from others and ruthlessly brutal in what you do,” or words to that effect 😉 #PostelsLaw
@mjgardner @icing actually, being liberal in accepting things is not a good idea either. If it violates the protocol, eject, close, kill, abort. At once. That leads to better code and protocols in the longer run.
@bagder @mjgardner @icing I am not a sticker guy, but if there was a "Postel was wrong" sticker, I immediately would put it on my otherwise blank laptop.
@bagder @mjgardner @icing this saying is credited for making the Internet possible but it's had a terrible track record wrt security. I can't count anymore how many vulns were caused by software trying to accept invalid stuff they should just drop.
@aris @bagder @icing If we followed security advice first and foremost, our computers would all be powered off, disconnected, and buried in individual concrete bunkers
@mjgardner @bagder @icing now we talk! 😀 Computers were a mistake anyway
@bagder @mjgardner @icing In the case of well established, well documented, widespread protocols, I totally agree. There are other factors that change the equation. Is it a new protocol? Are the docs good? Do the people involved in implementing have a means to communicate? And human input changes the equation in a big way. No one expects humans to type HTTP, TLS, or TCP.
@bagder @mjgardner @icing I'm a fan of being strict but looking at html it's been great that browsers accept unknown tags
@icing uh, poor colleagues who need to maintain specific curl versions for 10 years
@icing sounds like a gain for everyone involved