Kunal Mehta

I don't think there's any straightforward way in pip nor poetry to swap out a dependency (see e.g. Cargo's patch: https://doc.rust-lang.org/cargo/reference/overriding-dependencies.html), and monkey-patching is more explicit, so that's probably the...

I had forgotten about this ticket, but I appreciate the historical input, the CA ecosystem has thankfully improved a bit. > I believe this affects both the securedrop-sdk (which is...

> It would be fairly easy to disable the back button (the same way the continue button is temporarily disabled while work is in progress), if you think that wouldn't...

This reveals a lot of issues: ``` securedrop_client/db.py:117: error: "Source" has no attribute "messages" [attr-defined] securedrop_client/db.py:118: error: "Source" has no attribute "files" [attr-defined] securedrop_client/db.py:119: error: "Source" has no attribute "replies"...

RIIR attempt: [permalink](https://github.com/freedomofpress/securedrop-proxy/blob/5daad5136619b582766203cb2e616204a35a07bd/src/main.rs) We have an 80-line Rust implementation of proxy v2 that is missing error handling and streaming of responses. Some key features: * Hostname comes from the environment,...

Some other considered ideas: * Just use an off-the-shelf HTTP proxy ("nginx"), which will limit itself to one domain. But we need something to translate qrexec calls to HTTP requests,...

I implemented streaming and error handling in the Rust version, and as I was porting the response content-type sniffing code, I realized that was weird because the client/sdk already knows...

> re connectTCP, yes you can limit it to specific ports using RPC policy rules Oh this is great. Thanks! > But if you're not talking about combining them, and...

> So "use one URL parser" seems to boil down here to "Can we find a way to use reqwest (for url) with either arti-client or arti-hyper?" reqwest + arti...

I started working on tests today and ran into two issues: 1. There's a [`rvcr` crate](https://lib.rs/crates/rvcr) to add vcr recording+replay to reqwest but it explicitly does not work with the...