Writing C for #curl
daniel.haxx.se/blog/2025/04/07…
It is a somewhat common question to me: how do we write C in curl to make it safe and secure for billions of installations? Some precautions we take and decisions we make. There is no silver bullet, just guidelines.daniel.haxx.se
It's been six years now since #curl dropped support for HTTP/1 pipelining.
daniel.haxx.se/blog/2019/04/06…
I have never regretted it.
HTTP/1.1 Pipelining is the protocol feature where the client sends off a second HTTP/1.1 request already before the answer to the previous request has arrived (completely) from the server. It is defined in the original HTTP/1.daniel.haxx.se
The #curl repository now contains more than 100,000 lines of documentation.
100,002 lines to be exact. 😁
To use curl as a tool for troubleshooting SigV4 signing, it is useful to have the 'Canonical Request', 'String To Sign' and 'Signature' calculations output. This trivial pat...GitHub
I'll speak at Joy of Coding in Rotterdam in June: joyofcoding.org/speakers.html
I'll bring #curl stickers. It could be fun!
A one-day conference that celebrates the art, craft, science but foremost the joy of software developmentjoyofcoding.org
Remember the #curl distro meeting 2025 next week! github.com/curl/curl/wiki/curl…
To make #curl better in distros. To make distros ship better #curl. To make everyone happier and the world a little nicer.
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP...GitHub
The changes and some bugfixes in curl 8.13.0 explained and described by Daniel StenbergYouTube
#curl 8.13.0
daniel.haxx.se/blog/2025/04/02…
Welcome to another curl release. Download it here. Release presentation I will do a live-streamed curl 8.13.daniel.haxx.se
in what way should #curl change or adapt to the coming Resumable Uploads for HTTP spec?
ietf.org/archive/id/draft-ietf…
Data transfer using the Hypertext Transfer Protocol ( ) is often interrupted by canceled requests or dropped connections.www.ietf.org
HTTPS RR in #curl
daniel.haxx.se/blog/2025/03/31…
RFC 9460 describes a DNS Resource Record (RR) named HTTPS. To highlight that it is exactly this DNS record called HTTPS we speak of, we try to always call it HTTPS RR using both words next to each other.daniel.haxx.se
You are all invited to #curl up 2025 in Prague. The annual curl event. For curl enthusiasts, users, developers and maintainers.
This is my favorite event of the year.
daniel.haxx.se/blog/2025/03/29…
Soon, in the first weekend of May 2025, we are gathering curl enthusiasts in a room in the wonderful city Prague and we talk curl related topics over two full days. We call it curl up 2025. curl up is our annual curl event and physical meetup.daniel.haxx.se
Eleven years since the Facebook document "The Road To IPV6" that claimed #curl was "hostile" to it and I still feel offended. 😀
daniel.haxx.se/blog/2014/03/28…
I'd like to comment Paul Saab's presentation from the other day at the World IPv6 Congress titled "The Road To IPv6 - Bumpy". Paul works for Facebook and in his talk he apparently mentioned curl (slide 24 of the PDF set).daniel.haxx.se
You can help #curl by testing this final release candidate, rc3, before the real release happens next week:
List on TLS page as they are supported per https://curl.se/docs/manpage.htmlGitHub
how to do a #curl release has been viewed 27K times!
Daniel makes the curl 8.12.0 release. Shows how a curl release is done. This is the 264th curl release. Shows the scripts, the procedures and the general pro...YouTube
This is similar to #16586. Can be tested with: curl --retry 2 xxx Before: curl: (6) Could not resolve host: xxx Warning: Problem : timeout. Will retry in 1 seconds. 2 retries left. curl: (6) Could...GitHub
I did this I'm using a curl multi to to some http request, but I noticed the socket function is being called with weird socket fd=0 while fd 0 is not even managed by curl. I enabled trace with debu...GitHub
Two years ago we introduced the #libcurl header API, which also made it easier to extract headers with the #curl tool:
daniel.haxx.se/blog/2022/03/24…
Okay you might ask, what's the news here? We've been able to get HTTP response headers with curl since virtually the stone age. Yes we have. Get the page and also show the headers: curl -i https://example.daniel.haxx.se
🛡️#Curl has been around for 26 years—and it’s still secure! How?
European Open Source Academy member, @bagder Stenberg, joined the latest episode of Security Weekly Productions, discussing how Curl and #libcurl have maintained security and reliability over decades.
A must-listen for #developers and #cybersecurity enthusiasts! 👨💻🔒
📺 Explore the episode : youtube.com/watch?v=0UavY_kKKic
👉 Learn more about the Academy : europeanopensource.academy/new…
#CyberSecurity #CurlProject #AppSec
A significant milestone for the European open source community was reached on January 30, 2025, when the European Open Source Awards (OSAwards 2025) celebrated the launch of the European Open Source Academy with the Inaugural Ceremony.europeanopensource.academy
Did you know that YOU can sponsor this year's #curl up? curl up is the annual curl developers meetup, this year taking place in May in Prague.
You can have your company name associated with the event while at the same time funding critical Internet infrastructure and one of the world's most widely used software components.
Just saying.
on this day, only twenty-five years ago, we shipped #curl 6.5 which introduced the fancy -w option
everything.curl.dev/usingcurl/…
everything there is to know about curl, libcurl and the cURL projecteverything.curl.dev
I had forgotten this. Six years ago I researched the Refresh HTTP header field and came to the conclusion that #curl doesn't need to bother.
daniel.haxx.se/blog/2019/03/12…
The other day someone filed a bug on curl that we don't support redirects with the Refresh header. This took me down a rabbit hole of Refresh header research and I've returned to share with you what I learned down there.daniel.haxx.se
Two years since the big #curl 25 year celebration I'm looking at project numbers from back then and compare them with current ones.
19,800 more lines of code
23 additional man pages
428 new test cases
83 more CI jobs
229 new authors
30,800 USD more in bug bounties
18 new command line options
14 more operating systems
4557 commits more
We're not slowing down.
Raised an issue to discuss how to improve curl's MQTT message output.
github.com/curl/curl/issues/16…
Comments and insight requested to plan a possible PR as I can't see a way to fix it without it being a breaking change to current behaviour.
I did this I ran curl mqtt://test.mosquitto.org/curl/test --output test.out -N Then in a different terminal curl mqtt://test.mosquitto.org/curl/test -d "helloWorld" curl mqtt://test.mosquitto.org/c...GitHub
Remember: when you run #curl shipped by Apple with the --cacert flag it won't behave like #curl does everywhere else. As I wrote about last year. I think they're doing it wrong. They think its fine.
daniel.haxx.se/blog/2024/03/08…
tldr: Apple thinks it is fine. I do not. On December 28 2023, bugreport 12604 was filed in the curl issue tracker. We get a lot issues filed most days so this fact alone was hardly anything out of the ordinary.daniel.haxx.se
#curl release candidate 1 for the pending release is here: curl.se/rc/
We'll appreciate if you take it for a spin and report any problems you find.
There was a question posed on the #curl IRC channel whether there's ever going to be a need to raise addressing or offsets from 64-bit to something larger, such as 128-bit.
I argue there is no need to do this. 64-bit can already address a very large amount of data. For example, many operating systems and filesystems have a limit of 2**64 for file sizes. But it is difficult to wrap your head around this; how much data can such a file really hold?
Some estimates (*) say that there's going to be around 181 ZB (zettabytes) of data in the world by the end of 2025.
This is only 9812 files if each file holds 2**64 bytes.
*) rivery.io/blog/big-data-statis…
Data is growing at a faster rate than ever before. 90% percent of the world’s data was created in the last two years. And every two years, the volume of data across the world doubles in size.Kevin Bartley (Rivery)
Right now, we have less than ten open issues for the #curl project
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP...GitHub
#curl roadmap 2025
Things we may see added and done in curl during 2025.YouTube
Currently, CURLWS_CONT does not function as specified by the docs. This is an attempt to modify its behavior to be more inline with documentation. This is my second attempt and attempts to implemen...GitHub
