Re: [Gimp-developer] New GIMP configure warning/error

[Partha Bagchi <partha1b gmail com>]

On Sat, May 13, 2017 at 8:52 AM, Jehan Pagès <jehan marmottard gmail com>
wrote:

> Hi,
>
> On Sat, May 13, 2017 at 6:25 AM, Partha Bagchi <partha1b gmail com> wrote:
> >
>
> > > No, there are at least 2 features affected: open remote files indeed
> > > and the help browser (help will fail showing with an error since our
> > > websites are now https only). This last one was getting quite a lot of
> > > report on the tracker and was very bad experience.
> > > Anyway nowadays https is the standard for web access. Not supporting
> > > this is not acceptable IMO.
> > >
> > > Jehan
> >
> >
> > Hi,
> >
> > You realize that for platforms other than Linux, that if you wish to
> install
> > glib-networking, you have to install
>
> Yes I realize that dependencies have often dependencies themselves.
> Unless there is something which proves to be impossible to compile on
> other platforms, I don't see the problem.
>
> > gnutls which requires that you install
> > nettle which in turn requires that you install gmp?
>
> gnutls is a SSL/TLS lib (the feature we need). And from my searches,
> nettle is apparently a cryptographic library and gmp would be an
> arithmetic library. This does make total sense for a SSL/TLS lib
> (which is a cryptographic protocol, and cryptography usually needs a
> lot of arithmetic).
> I don't see your point. That doesn't seem at all far fetched
> dependencies for the feature we need, quite the opposite.
>
> > All this because you
> > want remote help files and remote images be accessed from GIMP? Does this
> > seem reasonable to you?
>
> It does seem absolutely reasonable, yes. I would even say that in
> 2017, not having support for TLS/SSL when we have web access
> requirement would be the thing which is absolutely non-reasonable.
For an image editor, I think this is unreasonable. I don't understand why
we are considering GIMP to be a network aware product due to 2 possible
usage when the rest of GIMP does not depend on it. Is it not possible to
ship the help files as PDFs while disabling URI if TLS/SSL is not installed
with the package?

> I am rerunning a crossbuild again to check that everything is all
> right, just to make sure. What I can say is that there exists
> pre-built packages for glib-networking (and all the dependencies) so I
> could install it and all its dependencies in about 10 seconds inside
> my crossbuild environment (using my tool called crossroad, with a
> single command: crossroad install glib-networking). So first it means
> that glib-networking is buildable for Windows and in you have the
> right tools, that's really not much of a hassle. Now on Windows, I
> have no idea how hard things are. But I assume you have various helper
> tools too.
You mean it's easy on Windows and then on Windows you have no idea how hard
things are? Did you mean Windows it's easy and Mac you don't know? I am not
sure I understand. In any case, as Kris mentioned below, you are talking
about bloating the application on both Windows and Mac.

> I really don't see the big deal here. And I don't see on which ground
> it may seem acceptable to not have secure protocols support when the
> whole internet is fighting these last few years for getting rid of
> non-secure protocols (for very obvious and understandable reasons).
> This is like trying to go against the flow.
The "internet is fighting is an interesting point of view for an image
editor. :)

> Jehan
>
> > Thanks,
> > Partha
>
>
>
> --
> ZeMarmot open animation film
> http://film.zemarmot.net
> Patreon: https://patreon.com/zemarmot
> Tipeee: https://www.tipeee.com/zemarmot