Making Mojo::UserAgent secure by default

44 views

Skip to first unread message

unread,

May 19, 2018, 7:23:14 AM5/19/18

to Mojolicious

Hi all,

Recently there has been some interest from the community in making Mojo::UserAgent secure by

default. As in activate TLS certificate verification by default. Now someone got the ball rolling with

a pull request and i wouldn't be surprised if that ends up getting applied sooner or later.

For certain uses this will be a breaking change, so if you have thoughts/worries, please join the

discussion on GitHub.

There might not be a deprecation period this time, since the change falls under the security

exception of our rules.

Personally, i think we should just replicate curl behaviour, since that seems to work for most

people.

sebastian

unread,

May 19, 2018, 3:49:41 PM5/19/18

to mojolicious

On Sat, May 19, 2018 at 6:23 AM sri <kra...@gmail.com> wrote:

Personally, i think we should just replicate curl behaviour, since that seems to work for most
people.