Re: [PR] HttpsSupport: Omit public suffix matcher from default hostname verifier [httpcomponents-client]

2025-06-11 Thread via GitHub
ok2c commented on PR #647: URL: https://github.com/apache/httpcomponents-client/pull/647#issuecomment-2962230914 > This doesn't sound unreasonable, although I do use client-mode verification for some advanced use cases that I wouldn't know how to reimplement using the JDK verifier.

Re: [PR] Safety net for infinite unproductive loop [httpcomponents-core]

2025-06-11 Thread via GitHub
arturobernalg commented on PR #527: URL: https://github.com/apache/httpcomponents-core/pull/527#issuecomment-2962379375 @farahaniali IMO Hard-coding a 1 000-cycle guard is just another band-aid. -- This is an automated message from the Apache Git Service. To respond to the message, plea

[jira] [Commented] (HTTPCLIENT-2374) Document CONNECTION_TIME_TO_LIVE semantic change in migration guide (timeToLive=0 behavior)

2025-06-11 Thread Oleg Kalnichevski (Jira)
[ https://issues.apache.org/jira/browse/HTTPCLIENT-2374?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17959747#comment-17959747 ] Oleg Kalnichevski commented on HTTPCLIENT-2374: --- [~joviegas] If you wa

[PR] Switch HostnameVerificationPolicy to BUILTIN by default [httpcomponents-client]

2025-06-11 Thread via GitHub
ok2c opened a new pull request, #649: URL: https://github.com/apache/httpcomponents-client/pull/649 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscr

Re: [PR] HttpsSupport: Omit public suffix matcher from default hostname verifier [httpcomponents-client]

2025-06-11 Thread via GitHub
ok2c commented on PR #647: URL: https://github.com/apache/httpcomponents-client/pull/647#issuecomment-2962854197 @rschmitt Here's what I propose instead #649 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL abo

Re: [PR] Safety net for infinite unproductive loop [httpcomponents-core]

2025-06-11 Thread via GitHub
ok2c commented on PR #527: URL: https://github.com/apache/httpcomponents-core/pull/527#issuecomment-2962871023 @farahaniali If can propose a safe-guard that does not involve a magic number like 1000 I will happily review. -- This is an automated message from the Apache Git Service. To re

Re: [PR] Safety net for infinite unproductive loop [httpcomponents-core]

2025-06-11 Thread via GitHub
farahaniali commented on PR #527: URL: https://github.com/apache/httpcomponents-core/pull/527#issuecomment-2963287934 > @farahaniali If can propose a safe-guard that does not involve a magic number like 1000 I will happily review. @ok2c Just update the PR. Reaching this if block m

Re: [PR] Safety net for infinite unproductive loop [httpcomponents-core]

2025-06-11 Thread via GitHub
ok2c commented on PR #527: URL: https://github.com/apache/httpcomponents-core/pull/527#issuecomment-2962249560 @farahaniali This work-around is hideous. I would prefer a proper fix to the problem instead. -- This is an automated message from the Apache Git Service. To respond to the mess

Re: [PR] Slightly better and efficient #toHexString method [httpcomponents-core]

2025-06-11 Thread via GitHub
ok2c merged PR #526: URL: https://github.com/apache/httpcomponents-core/pull/526 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@hc.apac

Re: [PR] Safety net for infinite unproductive loop [httpcomponents-core]

2025-06-11 Thread via GitHub
garydgregory commented on PR #527: URL: https://github.com/apache/httpcomponents-core/pull/527#issuecomment-2962277800 I agree with @ok2c , this type of change may be acceptable for local debugging but it doesn't belong in production. You may want to gather use case specific metrics and re

Re: [PR] Safety net for infinite unproductive loop [httpcomponents-core]

2025-06-11 Thread via GitHub
farahaniali commented on PR #527: URL: https://github.com/apache/httpcomponents-core/pull/527#issuecomment-2962297354 @ok2c and @garydgregory do not disagree with the fact that this is the simplest and arbitrary looking solution. Open to suggestion so I can incorporate any available mechan

Re: [PR] Safety net for infinite unproductive loop [httpcomponents-core]

2025-06-11 Thread via GitHub
ok2c commented on PR #527: URL: https://github.com/apache/httpcomponents-core/pull/527#issuecomment-2963439457 @farahaniali All right. That makes more sense. I will merge the change-set to master but not to the stable 5.3.x branch for now. We will see how the TLS code behaves in the coming

Re: [PR] Safety net for infinite unproductive loop [httpcomponents-core]

2025-06-11 Thread via GitHub
ok2c merged PR #527: URL: https://github.com/apache/httpcomponents-core/pull/527 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@hc.apac