Re: git: 9aa076b8b3af - main - ftp/curl: Update to 8.15.0

From: Torsten Zuehlsdorff <freebsd_at_toco-domains.de>
Date: Sun, 17 Aug 2025 09:39:01 UTC

On 26.07.25 20:45, Torsten Zuehlsdorff wrote:
> On 26.07.25 10:21, Mathieu Arnold wrote:
>> On Sat, Jul 26, 2025 at 08:16:52AM +0000, Osipov, Michael wrote:
>>>> On 2025-07-24 17:48, Michael Osipov wrote:
>>>>>> The branch main has been updated by sunpoet:
>>>>>>
>>>>>> URL:
>>>>>>
>>>> https://cgit.FreeBSD.org/ports/commit/? 
>>>> id=9aa076b8b3af02004e0b9d06459e063d27e0
>>>>>>
>>>>>> 9c26
>>>>>>
>>>>>> commit 9aa076b8b3af02004e0b9d06459e063d27e09c26
>>>>>> Author:     Po-Chuan Hsieh <sunpoet@FreeBSD.org>
>>>>>> AuthorDate: 2025-07-24 11:10:59 +0000
>>>>>> Commit:     Po-Chuan Hsieh <sunpoet@FreeBSD.org>
>>>>>> CommitDate: 2025-07-24 11:18:53 +0000
>>>>>>
>>>>>>      ftp/curl: Update to 8.15.0
>>>>>>
>>>>>>      - Adjust default options: enable MQTT and SMB by default
>>>>>
>>>>> What is the motivation to enable both by default? Yes, MQTT is cheap,
>>>>> SMB is especially because it should imply other options. See
>>>>> curl/lib/smb.c
>>>>>
>>>>> Michael
>>>>
>>>> It should also be noted that it only supports SMBv1 (
>>>> https://github.com/curl/curl/blob/curl-8_15_0/docs/FEATURES.md ) which
>>>> is deprecated since 2013.
>>>> https://en.wikipedia.org/wiki/Server_Message_Block#SMB_1.0
>>>
>>> That's even worse. It should not be enabled at all.
>>
>> Both options add no dependencies, and can be useful to people, it is
>> basically the definition of enabled by default.
> 
> Enabling an deprecated and unsecure option is basically the definition 
> of NOT-default. Especially without any explanation of the reason behind 
> this or any warning for the users.
> 
> So what is the argument to keep it?

?

Best,
Torsten