269f7df0ae
Also removed mentions from most docs. Discussed: https://curl.haxx.se/mail/lib-2019-05/0045.html Closes #3888
1.9 KiB
Items to be removed from future curl releases
If any of these deprecated features is a cause for concern for you, please email the curl-library mailing list as soon as possible and explain to us why this is a problem for you and how your use case can't be satisfied properly using a work around.
HTTP/0.9
Supporting this is non-obvious and might even come as a surprise to some users. Potentially even being a security risk in some cases.
State
curl 7.64.0 introduces options to disable/enable support for this protocol version. The default remains supported for now.
Removal
The support for HTTP/0.9 will be switched to disabled by default in 6 months, in the September 2019 release (possibly called curl 7.68.0).
PolarSSL
The polarssl TLS library has not had an update in over three years. The last release was done on January 7 2016. This library has been superceded by the mbedTLS library, which is the current incarnation of PolarSSL. curl has supported mbedTLS since 2015.
It seems unlikely that this library is a good choice for users to get proper TLS security and support today and at the same time there are plenty of good and updated alternatives.
I consider it likely that the existing users of curl + polarssl out there are stuck on old curl versions and when they eventually manage to update curl they should also be able to update their TLS library.
State
In the curl 7.66.0 release (July 17, 2019) the ability to build with this TLS backend is removed from the configure script. The code remains and can be built and used going forward, but it has to be manually enabled in a build (or the configure removal reverted).
Removal
The support for PolarSSL and all code for it will be completely removed from the curl code base six months after it ships disabled in configure in a release. In the release on or near February 27, 2020. (Named 7.70.0?)