Should we drop the SSL certificate bundle?

[Rolf Eike Beer]

Thiago Macieira wrote:
> On Thursday 19. August 2010 00.18.17 Rolf Eike Beer wrote:
> > -do we really want to care? For Mozilla SSL/TLS is essential. For KDE
> > software it's just a small part as we have so many libraries and
> > applications  in our stack.
> 
> We do have a browser too, you know.

And I'm using it as my default browser on all platforms, even my Windows box 
at work (which is a PITA, but that's a different story). But if you remove 
Konqueror and KMail from the usual KDE desktop you still have _tons_ of stuff 
left. If you remove Firefox and Thunderbird from Mozilla you are close to 
nothing. That was what I tried to say.

> Anyway, as of Qt 4.7, Qt loads the global store on any platform. All KDE
> has to do to benefit from that is to stop overriding.

That sounds very reasonable to me.

Is that bundle additive or exclusive? So can we simply ship a bunch of 
additional certs we like and use everything from the global store or will our 
bundle always replace the global one if we provide one?

Eike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20100819/6913dba4/attachment.sig>