diff options
| author | Jonathan Schwender <55576758+jschwe@users.noreply.github.com> | 2025-04-16 13:47:49 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-04-16 11:47:49 +0000 |
| commit | 94a9588bcc2d6396f76cc5f7467d31f22c8b3791 (patch) | |
| tree | e17a5cd47a6201f52d42243bcccf04566b6f6b2a | |
| parent | 6bad65a5a16c5a90b09fe8d0441c1d473e46e060 (diff) | |
| download | servo-94a9588bcc2d6396f76cc5f7467d31f22c8b3791.tar.gz servo-94a9588bcc2d6396f76cc5f7467d31f22c8b3791.zip | |
uv: Use native-tls (#36564)
uv by default uses baked in webpki certificates.
Using the system certificates is preferable for multiple reasons:
- OS updates will automatically update the certificates (including
revoking)
- Supports custom certificates installed on the system (corporate
networks)
uv does not enable this option by default, because it has a performance
overhead on macos.
In our scenarios, with long-running commands, the overhead is basically
not measurable.
I've been using the option on my mac for around 1 month now, without
noticing any degradation.
See also the previous discussion in
https://github.com/servo/book/issues/53 for some background.
Testing: We use `uv` in all our tests
Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>
| -rw-r--r-- | uv.toml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/uv.toml b/uv.toml new file mode 100644 index 00000000000..5af84e6cfda --- /dev/null +++ b/uv.toml @@ -0,0 +1 @@ +native-tls = true |