[vlc-devel] Re: vlc: svn commit r18300 (courmisch)

[Rémi Denis-Courmont]

Le mercredi 6 décembre 2006 23:33, Mark Moriarty a écrit :
> What happens if gnutls is removed, then, for those of us who must be
> concerned with encryption laws?
> What parts of VLC break?

I suppose Win32 and Mac OS X builds link libgcrypt statically. 
Currently, we only use it (indirectly) in the GnuTLS plugin. That's in 
use for HTTP/SSL and HTTP/TLS support. These are optionaly supported by 
the HTTP interface, HTTP stream output and HTTP access.

Removing the GnuTLS plugin (libgnutls_plugin.*) removes the sensitive 
code, while retaining non-SSL HTTP. You can simply not compile 
libgcrypt (nor libgnutls, and use ./configure --disable-gnutls). That 
is not the only decryption stuff in VLC though; DVD CSS is probably a 
lot more sensitive, as it involves decryption/cracking, while GnuTLS 
makes "normal" use of ciphers.

-- 
Rémi Denis-Courmont
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://mailman.videolan.org/pipermail/vlc-devel/attachments/20061206/5ea1a68f/attachment.sig>