- Dillo-dev - lists.mailman3.com

Dillo version 3.1-dev hangs on http://www.nhl.com

by waltdnes＠waltdnes.org

I pulled a few minutes ago and built it (8-year-old Intel Core 2 Duo running 64-bit Gentoo linux). It runs OK on CNN.COM and even the NHL mobile site http://m.nhl.com but with most of the tabs not working (Javascript, I assume). However, going to the main NHL site http://www.nhl.com hangs dillo and pegs a CPU. Here's a line of output from "top c", showing 99.2% CPU usage... 19235 waltdnes 20 0 328552 114840 11708 R 99.2 3.7 0:09.89 /home/waltdnes/.local/bin/dillo I have to pop open an xterm window and kill the pid e.g. "kill -3 19235" "dillo -v" shows "Dillo version 3.1-dev" -- Walter Dnes <waltdnes at waltdnes.org>

June 18, 2015

Here's 3.0.5 RC1

by Johannes.Hofmann＠gmx.de

On Wed, Jun 17, 2015 at 04:37:01PM +0000, eocene wrote: > > In my use of the 3.0.5 branch, there haven't been any unpleasant surprises, > so let's have an RC: > > http://www.dillo.org/download/dillo-3.0.5-rc1.tar.bz2 > > If it's any comfort to have the sha256sum, it's: > 484748e98b263ccd595ce349857edec4a431feb414e44cdbe86722a64387d000 compiles and runs nicely on DragonFly BSD. Cheers, Johannes

June 18, 2015

Here's 3.0.5 RC1

by sgeerken＠dillo.org

Should have gone to the list ... On Mi, Jun 17, 2015, eocene wrote: > In my use of the 3.0.5 branch, there haven't been any unpleasant surprises, > so let's have an RC: > > http://www.dillo.org/download/dillo-3.0.5-rc1.tar.bz2 Works without problems. > If it's any comfort to have the sha256sum, it's: > 484748e98b263ccd595ce349857edec4a431feb414e44cdbe86722a64387d000 Correct! Sebastian

June 17, 2015

Here's 3.0.5 RC1

by eocene＠gmx.com

In my use of the 3.0.5 branch, there haven't been any unpleasant surprises, so let's have an RC: http://www.dillo.org/download/dillo-3.0.5-rc1.tar.bz2 If it's any comfort to have the sha256sum, it's: 484748e98b263ccd595ce349857edec4a431feb414e44cdbe86722a64387d000

June 17, 2015

splash links

by eocene＠gmx.com

Jorge wrote: > On Mon, Jun 15, 2015 at 04:33:03PM +0000, eocene wrote: > > 2. In my opinion, it wouldn't do any harm to remove the "News", "Additional > > Stuff", and "Essential Readings" links, as they have something of an > > Internet Circa 2002 flavor (in some ways it's a shame to think how > > pioneering projects like Project Gutenberg lose their preeminence as the > > pioneer days end, but I suppose that's the way of things). > > In my opinion those links are very important, and want to keep them > there. It later occurred to me that maybe the most accurate thing would be to label them as Jorge's Links, whereas they currently would be understood by a user to be the Dillo core team's links, which they aren't.

June 15, 2015

splash links

by jcid＠dillo.org

On Mon, Jun 15, 2015 at 04:33:03PM +0000, eocene wrote: > > 1. freecode. Between the fact that the site's been in suspended animation > for a year and there's been all of this sourceforge unpleasantness just > lately, it would be nice not to link to them. OK. > > 2. In my opinion, it wouldn't do any harm to remove the "News", "Additional > Stuff", and "Essential Readings" links, as they have something of an > Internet Circa 2002 flavor (in some ways it's a shame to think how > pioneering projects like Project Gutenberg lose their preeminence as the > pioneer days end, but I suppose that's the way of things). In my opinion those links are very important, and want to keep them there. > PS Been running on the 3.0.5 branch here, of course, and everything's been > fine so far. Good. -- Cheers Jorge.-

June 15, 2015

splash links

by eocene＠gmx.com

1. freecode. Between the fact that the site's been in suspended animation for a year and there's been all of this sourceforge unpleasantness just lately, it would be nice not to link to them. 2. In my opinion, it wouldn't do any harm to remove the "News", "Additional Stuff", and "Essential Readings" links, as they have something of an Internet Circa 2002 flavor (in some ways it's a shame to think how pioneering projects like Project Gutenberg lose their preeminence as the pioneer days end, but I suppose that's the way of things). PS Been running on the 3.0.5 branch here, of course, and everything's been fine so far.

June 15, 2015

how about if we make a 3.0.5

by eocene＠gmx.com

I wrote: > noname wrote: > > SSL3 and compression are not the main issue. > > HTTPS in dillo is completely broken because it does not check for domain > > name in the certificate. > > hg tip has checking code copied from wget and current dillo release has > > no code for it at all. It means that Dillo accepts any valid certificate > > as a certificate for, let's say, gmail. You can get one from StartSSL > > for free and test, it works. > > Right, I hadn't wanted to do any real New Work for 3.0.5 that would require > a somewhat higher level of scrutiny and testing, but all right, I'll take > a look at gluing that stuff into the https dpi. Adapted the name checking to fit into the dpi, plus server name indication while I was at it. Looks like it may be working. I'll push the code to the server later if you can promise to help give it heavy testing in coming days. When you're browsing, if you just change http to https, so many sites that don't expect TLS connections will offer up certificates that are broken in some way. And then try the various cancel/continue combinations...

June 12, 2015

how about if we make a 3.0.5

by eocene＠gmx.com

noname wrote: > SSL3 and compression are not the main issue. > HTTPS in dillo is completely broken because it does not check for domain > name in the certificate. > hg tip has checking code copied from wget and current dillo release has > no code for it at all. It means that Dillo accepts any valid certificate > as a certificate for, let's say, gmail. You can get one from StartSSL > for free and test, it works. Right, I hadn't wanted to do any real New Work for 3.0.5 that would require a somewhat higher level of scrutiny and testing, but all right, I'll take a look at gluing that stuff into the https dpi.

June 12, 2015

how about if we make a 3.0.5

by noname＠inventati.org

On Tue, Jun 09, 2015 at 02:50:30PM +0000, eocene wrote: > > It would be nice to put out some new stuff. > > Primary motivations: > > 1. placeholder attributes for textarea/input are everywhere, and often > they have no other explanation of their purpose. Having to guess > "this is probably for search, this is probably for username, this > is probably for password" is no fun. > 2. I know there are users just trusting dillo's https, so at the > least it would be good for their https dpis to have a better > cipher list and to disable SSL3 and compression. SSL3 and compression are not the main issue. HTTPS in dillo is completely broken because it does not check for domain name in the certificate. hg tip has checking code copied from wget and current dillo release has no code for it at all. It means that Dillo accepts any valid certificate as a certificate for, let's say, gmail. You can get one from StartSSL for free and test, it works.

June 12, 2015