June 2024 - Dillo-dev - lists.mailman3.com

Re: it is nice to see dillo reborn

by Rodrigo Arias

Hi, On Sat, Jun 01, 2024 at 09:06:44AM -0600, pastebin(a)gmx.com wrote: >> Yes, you can send them to my email. Not sure what format sylpheed >> uses, but I will try to convert them to mbox and merge what is >> missing. > >see my private email to you Just got it now, thanks! >see attached pngs > >1.png 'save page as file' dialog - dialog size i want > >2.png 'save page as file' dialog - file already exists - dialog size i want > >3.png 'file exists' dialog - is the same size as 'save page as file' >dialog - the size is to large for what i want so if i reduce the >dimensions - the next 'save page as file' dialog i get will be to small >(the same size as what i made the 'file exists' dialog As a general note, in your pictures I see you are loading /root directly from Dillo, which suggest you are running Dillo as root. I would really avoid doing that while browsing, as any potential remote code execution we could have would give an attacker immediate root access on your machine (among other issues). >dillo saves one dimension size for the two dialog boxes >maybe 2 separate size dimensions for 'save page as file' and 'file >exists' dialog If you have a working patch I could merge it into 3.1.1. Otherwise I can queue it among the other issues, as I would need to investigate further how to solve it. I have a patch somewhere that switches to a native file picker, which may solve one of the problems (it also remembers where you saved the last file). But this will probably be added in 3.2.0, as I'm finishing bug fixes for 3.1.1 (no more features for now). >do don't get ssl dialog warning when connecting to https site and does >connection > >src.IO.tls.c >/* 3.0.5 modification > choice = a_Dialog_choice(title, dialog_warning_msg, "Continue", > "Cancel", NULL); > if (choice == 1) { > ret = 0; > } */ > ret = 0; > dFree(dialog_warning_msg); > } > } > dFree(title); > This shouldn't be a problem now, as the annoying pop-ups are fixed. But they still show when there is an actual problem with the TLS certificates, in which case you *don't* want to ignore them by default. >- > >src.prefs.c >/* 3.0.5 modification >#define PREFS_HOME "http://www.dillo.org/" */ >#define PREFS_HOME "" > >src.ui.cc >/* 3.0.5 modification > StatusOutput->value("http://www.dillo.org"); */ > StatusOutput->value(""); > >- These are fixed too. You can configure the home address to another value in dillorc with the "home" option, no need to patch Dillo. > >src.menu.cc >/* 3.0.5 modification > static Menu_popup_data_t page_data = {"Page menu", NULL, pm}; */ > static Menu_popup_data_t page_data = {NULL, NULL, pm}; > >src.menu.cc >/* 3.0.5 modification > static Menu_popup_data_t image_data = {"Image menu", NULL, pm}; */ > static Menu_popup_data_t image_data = {NULL, NULL, pm}; > >src.menu.cc >/* 3.0.5 modification > static Menu_popup_data_t form_data = {"Form menu", NULL, pm}; */ > static Menu_popup_data_t form_data = {NULL, NULL, pm}; > >--- I think these are useful to be seen, as it may happen that you are clicking accidentally on an image that is larger than it look like, and the menu is not what you would expect. > >> >and changing position of dialog buttons i will post them in case >> >someone else wants them - >> >> This may be useful, as sometimes they open in weird positions. > >i didn't do this for 3.0.5 (just for earlier versions - i forgot to do it for 3.0.5 and it was okay :) For the future, if you work with git (recommended), you can format your patches with `git format-patch` so they can be applied directly. Or with `git send-email` so you also include the patch message and other metadata. Alternatively, please format patches with `patch -up` so they are easy to integrate. Best, Rodrigo.

June 1, 2024

Re: dns over tls or dns over https

by pastebin＠gmx.com

Thanks - good information are you getting my emails to your gmail email? suggestion add 'to search for mbed TLS only' to '--disable-openssl' switch :) why don't you like dnssec? On Sat, 1 Jun 2024 21:58:42 +0200 Rodrigo Arias <rodarima(a)gmail.com> wrote: > Hi, > > On Sat, Jun 01, 2024 at 01:27:07PM -0600, pastebin(a)gmx.com wrote: > >Hi > > > >could someone give me an idea about dillo using 'dns over tls' or 'dns > >over https'? or using dnssec? > > The mobilized fork has added support for it, as it is provided by > libcurl (which they have switched to): > > > 20240522: New tarball. To enable DNS-over-HTTPS (DoH), you can now set > > the preference dns_over_https_url. > > https://www.toomanyatoms.com/software/mobilized_dillo.html > > My recommendation is to setup a local resolver on your machine, so all > name resolution is handled by it, not just Dillo. Then you can use > whatever mechanism you want (DoH, DoT, DNSSEC...). > > This would be especially useful if you download a file with Dillo, as it > would launch an external wget process. Or if you use any plugin that > performs network operations on its own. > > Here are some docs (even if you don't use Arch): > > https://wiki.archlinux.org/title/DNS-over-HTTPS > https://wiki.archlinux.org/title/DNSSEC > > I didn't check on my own how well that works, but I would rather keep it > out of Dillo if posible. > > >what about dillo using mbed-tls vs openssl? > >the configuration only shows a --disable-mbedtls > > The DNS resolution is done prior to interacting with any TLS library. > There is also a --disable-openssl switch to search for mbed TLS only, > see ./configure --help. > > Best, > Rodrigo. > _______________________________________________ > Dillo-dev mailing list -- dillo-dev(a)mailman3.com > To unsubscribe send an email to dillo-dev-leave(a)mailman3.com

June 1, 2024

Re: dns over tls or dns over https

by Rodrigo Arias

Hi, On Sat, Jun 01, 2024 at 01:27:07PM -0600, pastebin(a)gmx.com wrote: >Hi > >could someone give me an idea about dillo using 'dns over tls' or 'dns >over https'? or using dnssec? The mobilized fork has added support for it, as it is provided by libcurl (which they have switched to): > 20240522: New tarball. To enable DNS-over-HTTPS (DoH), you can now set > the preference dns_over_https_url. https://www.toomanyatoms.com/software/mobilized_dillo.html My recommendation is to setup a local resolver on your machine, so all name resolution is handled by it, not just Dillo. Then you can use whatever mechanism you want (DoH, DoT, DNSSEC...). This would be especially useful if you download a file with Dillo, as it would launch an external wget process. Or if you use any plugin that performs network operations on its own. Here are some docs (even if you don't use Arch): https://wiki.archlinux.org/title/DNS-over-HTTPS https://wiki.archlinux.org/title/DNSSEC I didn't check on my own how well that works, but I would rather keep it out of Dillo if posible. >what about dillo using mbed-tls vs openssl? >the configuration only shows a --disable-mbedtls The DNS resolution is done prior to interacting with any TLS library. There is also a --disable-openssl switch to search for mbed TLS only, see ./configure --help. Best, Rodrigo.

June 1, 2024

dns over tls or dns over https

by pastebin＠gmx.com

Hi could someone give me an idea about dillo using 'dns over tls' or 'dns over https'? or using dnssec? what about dillo using mbed-tls vs openssl? the configuration only shows a --disable-mbedtls

June 1, 2024

Re: it is nice to see dillo reborn

by pastebin＠gmx.com

Hi Rodrigo I passed my emissions better than last years numbers - now i can pollute the environment with a smile that i complied with their silly money making scheme here are the replies On Tue, 28 May 2024 22:45:06 +0200 Rodrigo Arias <rodarima(a)gmail.com> wrote: > Hi, > > On Mon, May 27, 2024 at 04:14:15PM -0600, pastebin(a)gmx.com wrote: > >i have saved 140 emails from 2019-2022 in (2) tar.bz2 files (total > >780K) your archive seems to be missing my posts :) which are in these > >as well > >i would have no idea about sending them to the archive.org but what > >about sending them to you directly rather then through the mailing > >list? > >they are in indivdual files just tarred up sylpheed folder dirs not in > >mbox format > > Yes, you can send them to my email. Not sure what format sylpheed uses, > but I will try to convert them to mbox and merge what is missing. see my private email to you > >my only problems with 3.0.5 where changes in the size of 'dialog' > >popups that affected other popup sizes (i will be more specific when > >they next occur) > >there appears to be one 'size' that applies to all popups? am i > >correct? > > Not sure what size are you referring to, is this an option in dillorc? see attached pngs 1.png 'save page as file' dialog - dialog size i want 2.png 'save page as file' dialog - file already exists - dialog size i want 3.png 'file exists' dialog - is the same size as 'save page as file' dialog - the size is to large for what i want so if i reduce the dimensions - the next 'save page as file' dialog i get will be to small (the same size as what i made the 'file exists' dialog dillo saves one dimension size for the two dialog boxes maybe 2 separate size dimensions for 'save page as file' and 'file exists' dialog > >I've been compiling source since early red hat and it never dawned on > >me that running ./configure is as dangerouse as hacked source itself - > >if the source is not trusted then neither is the ./configure - thanks > >for straightening me out on a decade old basic false assumption i've > >had (YIKES!) > > :-) > > >My changes from 3.0.5 to my 3.1 are largely cosmetic prefernces (local > >loading of help file vs getting it over the web when click '?' > > This is the default[1] but the manual has been updated heavily. If the > local file cannot be opened, the remote version[2] is tried. > > [1]:https://github.com/dillo-browser/dillo/blob/v3.1.0/src/ui.cc#L240-L255 > [2]:https://dillo-browser.github.io/user_help.html > > >and adding duckduck to primary search choice when click 'magnifying > >glass' > > This is also the default now. since they are now the default they are moot for dillo-3.1.0 src.IO.about.c /* i3.0.5 modification " <a href='http://www.dillo.org/dillo3-help.html'>\n" */ " <a href='file://root/.dillo/help/dillo3-help.html'>\n" src.prefs.c /* 3.0.5 modification #define PREFS_SEARCH_URL "https://www.google.com/search?ie=UTF-8&oe=UTF-8&q=%s" */ #define PREFS_SEARCH_URL "http://duckduckgo.com/lite/?kp=-1&q=%s" src.menu.cc /* 3.0.5 modification a_UIcmd_open_urlstr(popup_bw, "http://www.dillo.org/help/bug_meter.html"); */ a_UIcmd_open_urlstr(popup_bw, "file:/root/.dillo/bugmeter/bug_meter.html"); src.ui.cc /* 3.0.5 modification a_UIcmd_open_urlstr(bw, "http://www.dillo.org/dillo3-help.html"); */ a_UIcmd_open_urlstr(bw, "file://root/.dillo/help/dillo3-help.html"); - - do don't get ssl dialog warning when connecting to https site and does connection src.IO.tls.c /* 3.0.5 modification choice = a_Dialog_choice(title, dialog_warning_msg, "Continue", "Cancel", NULL); if (choice == 1) { ret = 0; } */ ret = 0; dFree(dialog_warning_msg); } } dFree(title); - src.prefs.c /* 3.0.5 modification #define PREFS_HOME "http://www.dillo.org/" */ #define PREFS_HOME "" src.ui.cc /* 3.0.5 modification StatusOutput->value("http://www.dillo.org"); */ StatusOutput->value(""); - src.menu.cc /* 3.0.5 modification static Menu_popup_data_t page_data = {"Page menu", NULL, pm}; */ static Menu_popup_data_t page_data = {NULL, NULL, pm}; src.menu.cc /* 3.0.5 modification static Menu_popup_data_t image_data = {"Image menu", NULL, pm}; */ static Menu_popup_data_t image_data = {NULL, NULL, pm}; src.menu.cc /* 3.0.5 modification static Menu_popup_data_t form_data = {"Form menu", NULL, pm}; */ static Menu_popup_data_t form_data = {NULL, NULL, pm}; --- > >and changing position of dialog buttons i will post them in case > >someone else wants them - > > This may be useful, as sometimes they open in weird positions. i didn't do this for 3.0.5 (just for earlier versions - i forgot to do it for 3.0.5 and it was okay :)

June 1, 2024