On Fri, 30 Apr 2021 21:59:42 +0200 Christoph Anton Mitterer wrote: > On Thu, 2021-04-29 at 18:31 +0200, Francesco Poli wrote: [...] > > I am under the impression that ruby-httpclient is more sophisticated > > than the basic net/http Ruby library. It should support more features > > (but I don't remember which ones...). > > This also means that it is somewhat slower. > > Hmm I was just trying out a few things... and noted that regardless of > whether or not ruby-httpclient is installed - the communication with > Debian server seems to be completely in plain HTTP[0]? :-o [...]
That's an old, long and complicated story. If you are looking for a way to kill some time, please read bug [#792639] and the other two which are merged with it. [#792639]: <https://bugs.debian.org/792639> I agree that using HTTPS would not solve all security issues, but it would a step forward... [...] > Anyway... I didn't notice any difference at all, whether ruby- > httpclient is there. > Also I didn't find any obvious references to it in the apt-listbugs > sources... so nothing like a "require httpclient" or so - but I don't > speak ruby, so there might be some auto-magic, which I just don't know > about. The auto-magic is behind the scenes (if I recall correctly, it's the ruby-soap4r library that automatically uses ruby-httpclient, if present, otherwise falling back to net/http). Anyway, if ruby-httpclient is superfluous for your use case, you should be able to do without it. Since it's only a recommendation (and not a strong dependency), you can remove or purge it, while keeping apt-listbugs installed. If you have no objections, I will close this bug report. -- http://www.inventati.org/frx/ There's not a second to spare! To the laboratory! ..................................................... Francesco Poli . GnuPG key fpr == CA01 1147 9CD2 EFDF FB82 3925 3E1C 27E1 1F69 BFFE
pgpoxtGDGNhmF.pgp
Description: PGP signature
