Search

Items tagged with: Curl

c10kday - #curl turns 10,000 days old

daniel.haxx.se/blog/2025/08/05…


c10kday

From March 20, 1998 when the first curl release was published, to this day August 5, 2025 is exactly 10,000 days. We call it the curl-10000-day. Or just c10kday. c ten K day. We want to celebrate this occasion by collecting and sharing stories.
daniel.haxx.se
#curl

#curl

just found out that i'm 3 months younger than #CURL O_o
#curl

#curl

This day shall be remembered as the last day #curl was still just 4 digits days old.
#curl

#curl

#curl

I spent over three hours yesterday debugging the latest #curl hackerone report. I think I understand it now.

Next tricky step is now to assess the security impact. Is there one?

#curl

#linux #ubuntu #curl

So I'm thinking of adding support for %time{} in #curl's -w function.

One reason for doing this is for users who use -w for logging and want to include the time of the event (post-transfer) in a convenient way.

github.com/curl/curl/pull/1811…

Feel free to share your opinion!


writeout: add %time{} by bagder · Pull Request #18119 · curl/curl

Output the current UTC time using strftime format. %f is an extra curl specific flag to output the microsecond fraction of the current second. TODO decide if we want this at all is the strftime ...
GitHub
#curl

#curl

On this day 26 years ago, the #curl website premiered on the host "curl.haxx.nu", as it moved over from having been hosted on my personal [company]/~dast/curl sub page previously.

Less than a year later we switched again to curl.haxx.se. We could not use the .se domain earlier because of limits in the TLD ruleset before that point.

We would then stay on that hostname for some twenty years.

#curl

#curl

#curl

#curl

#curl

#curl

The "good" people at Emerson for some reason couldn't think for themselves when I responded to them on behalf of #curl and instead continue and send the same questions to the #libssh2 project with the same "demands".

"This is a gentle reminder regarding our earlier request for your input on the cybersecurity risk assessment of the software component “libssh2” version 1.11.0, as part of our compliance efforts with the EU Cyber Resilience Act (CRA)."

#curl #libssh2

#curl

#curl

#curl

Native Schannel TLS stack of #Windows was so unreliable it got axed from #curl:
* Never worked reliably under real‑world loads.
* Quirky, cumbersome API/architecture that broke integrations.
* Zero developer interest—nobody tested or maintained it.
* Pure maintenance drag with no real benefit.

So #Microsoft again shipped a built‑in that nobody uses, and projects ditch it entirely in favor of better third‑party alternatives.

daniel.haxx.se/blog/2025/07/29…


Carving out msh3

I hope that by now most readers of my blog have understood that curl, and libcurl specifically, is an architecture with a transfer core with a set of different backends plugged in. Backends powered by different third party libraries.
daniel.haxx.se
#Windows #microsoft #curl

Carving out msh3. #curl drops an HTTP/3 backend.

daniel.haxx.se/blog/2025/07/29…


Carving out msh3

I hope that by now most readers of my blog have understood that curl, and libcurl specifically, is an architecture with a transfer core with a set of different backends plugged in. Backends powered by different third party libraries.
daniel.haxx.se
#curl

--out-null is #curl's 270th command line option.

Discard all response output of a transfer silently. This is the more efficient
and portable version of

curl host.example -o /dev/null

The transfer is done in full, all data is received and checked, but the bytes are not written anywhere. --out-null is associated with a single URL. Use it once per URL when you use several URLs in a command line.

#curl

#curl

starting in the pending #curl 8.16.0, curl will default to TLS 1.2 as a minimum even if the TLS library can do lower versions
#curl

#curl

#curl

#curl

take a guess if the same company now emailed the exact same CRA compliance questionnaire they sent to the #curl project last week, to the libssh2 project!

Correct. They did.

#curl

#foss #curl #froscon @daniel:// stenberg://

#curl

#curl

If you go to #FroSCon in August you could hear me blab "AI slop attacks on the #curl project".
Title: "AI slop attacks on the curl project" With a painting showing an old sail ship being under attack from a huge sea monster. Non-realistic using only blue, grey and brow colors.
#curl #froscon

#curl

the #curl release live-stream starts now at twitch.tv/curlhacker

curlhacker - Twitch

I'm Daniel Stenberg, maintainer and lead developer in the curl project. I stream curl related stuff. Release presentations, curl development and related topics.
Twitch
#curl

I'm happy to say that we have zero #curl CVEs to announce this time.
47 days since the last confirmed curl vulnerability report
#curl

My gut feeling says you need a new #curl release. So here is curl 8.15.0 just for you.

daniel.haxx.se/blog/2025/07/16…


curl 8.15.0

Welcome to another curl release. A shorter cycle this time so we did not have time to merge many changes: there is just one logged. See below. This is the 269th release featuring 269 command line options.
daniel.haxx.se
#curl

Even as #curl is soon 10000 days, here's a list of changes and features that we have queued up for the coming next release. And these are just things we think have a chance of getting merged. (But not all of them will manage, most likely.)
#curl

⇧