Discussion: Could parsing and signing be split into two separate crates? about cookie-rs HOT 2 CLOSED

Yeah the historical events here were unfortunate, but it should be getting much better soon! With ring coming soon as well as a default-off feature I think this'll effectively be solved, so I'm going to close this.

from cookie-rs.

In 0.7, cookie will be using ring for it's crypto (#68). Unlike openssl, ring has no -sys dependencies, making it a fairly light dependency. The only caveat is that it requires Visual Studio to be installed on Windows to build, but that itself is changing. In short, ring should be as easy to build as any other Rust library.

My impression from speaking with @seanmonstar is that this would resolve his qualms about including cookie as a dependency in reqwest. Removing the dependency from hyper, I believe, was for this reason and others. I personally would not like to see cookie be a dependency of hyper.

secure is an optional feature. If you don't want the signing/encryption features, then simply don't enable the feature. I don't see the difference between having secure be a feature and having it be a separate crate.

from cookie-rs.