From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id DBBA543AC0 for ; Thu, 11 Aug 2022 16:49:35 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id A977068B91A; Thu, 11 Aug 2022 19:49:32 +0300 (EEST) Received: from btbn.de (btbn.de [136.243.74.85]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 731D968B371 for ; Thu, 11 Aug 2022 19:49:26 +0300 (EEST) Received: from [authenticated] by btbn.de (Postfix) with ESMTPSA id 1D821363FD6 for ; Thu, 11 Aug 2022 18:49:26 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rothenpieler.org; s=mail; t=1660236566; bh=LNGbsVTvdGrLOhG26SBdEBoFzU7O1CSzMcoEz9vP+ik=; h=Date:Subject:To:References:From:In-Reply-To; b=bgvbOaJUIO2qkTecWbeJwPos9/OshymckjL2i2acnpkgRiII307v7Vtpfb+DbwSn6 CxZpOgpw0lVHt8w7ThKEM6dxiHQU/wuyTu/L3FmTTydH1Kl27sugeaKPhPu/LF26YH 8/ND755vW+SioNs0ADYN7o+/q4EVs51Yx6BSbTRBS3V45Y92l1RGkrAWIW/ywX2Nad JSDyf/VWJLJqW0tlvYyDg0dkxpqhJnrWu/mSACt1rixo5TXBudz7Y3YUc71c+Sy1hw jAtFOm1gr2furSvK4vGP9Zrq1sKEclCV609eI6p48v/eH9AkdYC23CoawHGwX0p5l2 LOxJya+oJf9vA== Message-ID: <612e12d2-4df2-a2fc-5560-7acd93c2fc8f@rothenpieler.org> Date: Thu, 11 Aug 2022 18:49:25 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.1.2 To: ffmpeg-devel@ffmpeg.org References: <20220810222708.186270-1-derek.buitenhuis@gmail.com> Content-Language: en-US From: Timo Rothenpieler In-Reply-To: Subject: Re: [FFmpeg-devel] [PATCH] ipfsgateway: Remove default gateway X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: On 11.08.2022 18:26, Mark Gaiser wrote: > Hi all, > > On the IPFS side we do have a solution for that with CAR files, you can > read more about that here [1]. > Within the scope of this ipfs gateway protocol handler there isn't a > solution yet to use CAR files, it is on our radar but still in the > discussion phase. > > On the cURL side we had this same discussion with 2 possible solutions [2]. > For completeness, i'll list them here in full too: > > 1. An error message that gives no example but instead points the user to > documentation on how to get it working. > === cURL example > $ curl ipfs://bafkreicysg23kiwv34eg2d7qweipxwosdo2py4ldv42nbauguluen5v6am > Error: local gateway not found and/or IPFS_GATEWAY is not set > Learn how to run one: https://docs.ipfs.tech/install/command-line/ > === > > 2. An error message that makes the user aware of IPFS and provides a > solution to get it working immediately. > === cURL example > $ curl ipfs://bafkreicysg23kiwv34eg2d7qweipxwosdo2py4ldv42nbauguluen5v6am > Error: local gateway not found and/or IPFS_GATEWAY is not set. > Try: IPFS_GATEWAY=https://ipfs.io > or run your own: https://docs.ipfs.tech/install/command-line/ > === > > Within the cURL implementation we're going for point 1. > The same idea can very well apply to ffmpeg too. Different texts that match > the different context, but in the same spirit. > > Now ffmpeg is a bit different here. First and foremost because it predates > the curl. > But also because the default fallback gateway was an explicitly requested > feature from the ffmpeg side to give an "it always works" feeling. > ffmpeg therefore has a fourth option: Do nothing and keep it as-is. I'm not sure who requested that, but I doubt "tunnel all user traffic through some random third parties server" was the idea there. Releases with that hardcoded server in will be in distributions for years, potentially over a decade long. Nobody can guarantee that it doesn't turn malicious in the future. And nobody can fully guarantee what the owner does with all the data today. This is simply unacceptable and it has to be fixed ASAP. The approach taken by this patch seems the correct way to deal with it to me. It prints a message informing the user on what to do, akin to what curl seems to do. _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".