From cf4f4cb86892f9a03e9bbb8a54c6007aaa4f22bd Mon Sep 17 00:00:00 2001 From: John Reese Date: Fri, 11 Apr 2014 14:10:15 -0700 Subject: [PATCH] Mention issues with libcurl in readme --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index c73ae6c..6d3df44 100755 --- a/README.md +++ b/README.md @@ -75,7 +75,9 @@ with the appropriate GCC flags so that it can find and link ZNC Push with libcur Note: You are strongly encouraged to use libcurl transport. The reason for that is, that the default CSocket transport doesn't verify server's SSL certificate which leaves you -vulnerable to MITM attacks. +vulnerable to MITM attacks. However, use of libcurl will *block* the main ZNC thread at every +push notification; for installations with many users, libcurl is *not* yet ideal, even with +the above security concerns in mind. Installation