April 2004 - Dillo-dev - lists.mailman3.com

Re: [Dillo-dev]About proxy authorization && password storing

by Jorge Arellano Cid

On Fri, 2 Apr 2004, Ivan Daniluk wrote: > Hi Jorge. Hi! > > > Maybe, we should open popup dialogue and ask user for > > > login/password? > > > > The login may be specified in dillorc, and the password asked > > in a popup dialog (whenever there's a login in dillorc :). > > > > This adds the burden of entering the password, but keeps things > > a bit more private. > I've implement this burden :), but stuck in a problem and need advice > and/or suggestion from you. > First, look to the attached current patch for stable dillo 0.8.0 > release. Oh, I haven't yet. Anyway, here's the answer. > Main problem for me is the way to stopping the query, waiting > until password will be entered or canceled, and resuming it. > When we call a_Interface_proxy_passwd_dialog(), the dialog window pops > up, and query goes forward, without being formed with proxy password. > So, I see two ways: > 1) to stop the query forming(in Http_get() function) and wait, while > proxy_passwd_dialog_window will be destroyed. > 2) to abort the query, and recall it when password will be entered. > > I'm a newbie in gtk programming, and can't figure out how to graceful > open dialog window and wait until it'll be closed. If it's possible, > than imho it's the best way. > About second choice.. There are complexity for me in a_Http_ccc stuff. > Sure, I'll win this problem, but it will take more time. And really > want to hear your thoughts about it. Use the third alternative! :-) AFAIS the simplest way to to it is to ask for the proxy password when dillo starts, that is, before any query is made, probably after the splash screen is displayed. That way, things would reach the same simplicity as in the first patch! > One more question around it. > Password dialog window is activating in case if there is option > "http_proxyuser" in config, but not when http query gets "Cache Access > Denied" error. > Is this way ok? AFAIU, yes. The proxy login/password pair is one thing, and HTTP's simple authentication mechanism (section 11) is another. It may happen that you reach a realm/password protected page through a login/password authenticated proxy. Now, if after this patch, you want to keep on working on basic authentication, be sure to contact Madis (AFAIR he once worked on it), and I can make the CCC bindings to stop/resume/forward the querying process. > And, the last note on patch. It's about following lines in IO/http.c: > + if ( strchr(prefs.http_proxyuser, ':') ) > + { > + DEBUG_MSG(5, "Storing proxy password in dillorc is insecure!\n"); > + ask_proxy_passwd = FALSE; > + HTTP_Proxy_Auth_base64 = a_Misc_encode_base64(prefs.http_proxyuser); > + } > It allows user to store in config file not only proxy user name, but > pair "user:password" as well. I've done it's mainly for convenience, > but of cource we can remove it from patch. Hmmm, this is one I'm not yet sure of. On one hand, it is very handy not to have to enter the password every time, and on the other, stealing the proxy's password becomes quite simple (for instance, a bathroom break and it's gone! ;). [minutes thinking...] It's not a thing I'd recommend. Now, as Dillo project is explicitly concerned about security, it can't do otherwise. Perhaps you may leave that portion of code commented out, so the responsibility is left to the one that decides to enable it. I'd like to hear comments about this. Specially from sysadmins. > Your suggestion for me are welcome. Thanks. Cheers Jorge.-

April 6, 2004

Re: [Dillo-dev]why use "ccc chain" instead of calling the function directly?

by Jorge Arellano Cid

On Sat, 3 Apr 2004, [gb2312] Lei Jin wrote: > Use "ccc chain" mechanism makes the code seeming uniform. But > it cause the source code difficult to understand because lots > of indirect function call and variety of parameters. The other way is to use threads and mutexes (much more complex and a bit slower too). > I wonder whether we can call the target function directly > instead of using "ccc chain", but I do not know if there is > difference between these two methods ??? The CCC is not just a way of making function calls, is a theory that allows for implementing non-preemptive parallelism without threads or forks. All the networking and error control in Dillo is driven by these pseudo-threads each shaped as a dynamic CCC. There can be even hundreds of them running at the same time (depending on the page, and on how many pages are loading in the background). Each thread doing network jobs can linger for a long time (generally measured in seconds, depending on latency, network load, size of the transfer, bandwidth etc) --that explains the need for a parallel approach--, now, each one of those threads needs independent error control and recovery, and it may have several steps to perform, so it also has to keep track of its state. That's the job of the CCC. It looks like contrived complexity, for sure, but that's mainly because people don't even start to realize that it handles parallelism in a single address space. This is a bit of my fault, I created the theory while working on Dillo, but I've never had the time to write it down and present it in abstract. Priorities always stood in the way. To my relief, it has worked rock solid, flexible enough to even account for plugins, and has needed low maintenance. Beleieve it or not, when things arrive to this state, the Jargon file regards them as "Deep magic". Cheers Jorge.-

April 6, 2004

[Dillo-dev]sourceforge

by Brian Craft

Anyone know why dillo renders the sidebars on sourceforge above the content, rather than beside it? I also note that the download links don't work with dillo, though I can cut and paste them into wget w/o problem. b.c.

April 6, 2004

[Dillo-dev]Disable toolbars

by Florian Angehrn

if i don't want both toolbars, what do i have to change in the sourcecode? many thanks for your great product (and an answer :)!

April 4, 2004

[Dillo-dev]Can't start dpid

by Barry Kauler

Hi, I'm not on the list, so hope this can be submitted! Kindly also reply a copy to bk(a)goosee.com I have been following Dillo for sometime, as a user, and recently upgraded to v0.8.0. Problem is, when I click on a ftp url, the message: "Error: can't start dpid daemon" So, I tried to start dpid directly on the commandline: # dpid # dpid.c:352: register_all: fatal error: -can't find the directory for dpis So, is there something missing here? -- what is dpis? Appreciate any advice on this! Regards, Barry Kauler

April 4, 2004

[Dillo-dev]why use "ccc chain" instead of calling the function directly?

by Lei Jin

Use "ccc chain" mechanism makes the code seeming uniform. But it cause the source code difficult to understand because lots of indirect function call and variety of parameters. I wonder whether we can call the target function directly instead of using "ccc chain", but I do not know if there is difference between these two methods ??? ( such as the process's address space??? )..... --------------------------------- Do You Yahoo!? 惠普TT游戏剧，玩游戏，中大奖！

April 3, 2004

Re: [Dillo-dev]what does a_Cache_ccc() actually do?

by Lei Jin

I can not understand it right now. Is there detail document, which introduces this mechanism? Jorge Arellano Cid <jcid(a)dillo.org> wrote: On Fri, 2 Apr 2004, [gb2312] Lei Jin wrote: > a.t.t The CCC (Concomitant Control Chain) is a very complex part of Dillo. It interconnects the different modules of the browser and takes the responsibility of coordinating all the parallel tasks, their data exchange, and error control. Cheers Jorge.- _______________________________________________ Dillo-dev mailing list Dillo-dev(a)lists.auriga.wearlab.de http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev --------------------------------- Do You Yahoo!? 完全免费的雅虎电邮，马上注册获赠额外60兆网络存储空间

April 3, 2004

Re: [Dillo-dev]what does a_Cache_ccc() actually do?

by Jorge Arellano Cid

On Fri, 2 Apr 2004, [gb2312] Lei Jin wrote: > a.t.t The CCC (Concomitant Control Chain) is a very complex part of Dillo. It interconnects the different modules of the browser and takes the responsibility of coordinating all the parallel tasks, their data exchange, and error control. Cheers Jorge.-

April 2, 2004

[Dillo-dev]what does a_Cache_ccc() actually do?

by Lei Jin

a.t.t --------------------------------- Do You Yahoo!? 完全免费的雅虎电邮，马上注册获赠额外60兆网络存储空间

April 2, 2004

Re: [Dillo-dev]The binary size is 3MB?

by Fang Yidong

350KB is the size of compile time.But it's the runtime that really means. > Lei Jin <victorjinl(a)yahoo.com.cn> wrote: > > > It is said that the dillo binary is only 350KB on > the website, but I > > compile the source and get the binary,which is > more than 3MB. Why? > > Maybe you could try to strip(1) it ? > > $ ls -lh dillo > -rwxr-xr-x 1 ht05089 linfo 1.4M Mar 31 2003 dillo > $ strip dillo > $ ls -lh dillo > -rwxr-xr-x 1 ht05089 linfo 275K Apr 1 13:24 dillo > > -- > Nipo > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev(a)lists.auriga.wearlab.de > http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev _________________________________________________________ Do You Yahoo!? 完全免费的雅虎电邮，马上注册获赠额外60兆网络存储空间 http://cn.rd.yahoo.com/mail_cn/tag/?http://cn.mail.yahoo.com

April 2, 2004