[openssl-project] To use or not use the iconv API, and to use or not use other libraries
levitte at openssl.org
Thu Jun 7 18:36:07 UTC 2018
In message <fe9ed5f1-9f8f-792b-9f26-512af63cec89 at openssl.org> on Thu, 7 Jun 2018 17:55:27 +0200, Andy Polyakov <appro at openssl.org> said:
appro> > Regarding general use of other libraries, please think carefully before voting, 'cause this *is* tricky. If you have a look, you will see that we *currently* depend on certain standard libraries, such as, for example, libdl.
appro> One has to recognize that each dependency has to be justified.
Yes, of course. Caution is advisable, always.
appro> > And perhaps we should also mention the pile of libraries used with windows.
appro> It's not about amount, but ubiquity and stability. Windows is bad
appro> example in the context, because it's rather "mono-cultural" environment.
Yes, you're right, and I didn't really mean to make a serious argument
about the amount, just pointing out that we already rely on standard /
appro> But *otherwise* thing is that we already *know* that those extra
appro> libraries work. Or at least know what to expect and how to deal with
appro> them on different platforms. They were effectively proven to work by
appro> lasting through several releases and years-long bug ironing. This *is*
appro> factor too. And that's what made me pose "is b) part of vote" in my last
I'll have you note that the PR that I'm pointing at still has an open
question about how to deal with the problem of some systems not
reliably support iconv.
Richard Levitte levitte at openssl.org
OpenSSL Project http://www.openssl.org/~levitte/
More information about the openssl-project