[Bug-wget] Trust On First Use & GSoC 2015 participation

[Molnár Géza]

Greetings all,

I am writing to you regarding two topics:

1.) I was delighted to find that Wget has a GSoC page. Last night I read
the project ideas and the instructions on how to start contributing to
Wget. I found project number two particularly interesting and I would love
to work on it. I believe implementing the use of if-modified-since headers
and TCP Fast Open would a lot of fun, and of course I think this project
would fit be well.  I will start reading the RFC-s tomorrow, so I can get
up to speed.
Also, do you guys think it would be a good project idea to implement basic
HTTP2 support for Wget?


2.) I got excited last night and built wget from source, ran all the test
and started looking at the open bugs. I started familiarizing with the
source code earlier today and I love it! ;) It seems very well documented
and I well structured. I can picture my self working on it. :)
One of the bugs (or requested feature perhaps) caught my eyes, and  that
was Trust On First Use. Is there anyone currently working on it? (I checked
the mail-list archives and it does not seem like anyone expressed interest.)
If it's clear to work on, that I have a couple of questions about it:
 - From what I understand, the ssl_check_certificate() in gnutls.c (and
perhaps a few other things) should be changed to check and store
problematic certificates if the user decides to do so. Is that right?
- How to involve the user into the decision? I mean, should wget prompt the
user with a question similar to ssh? "The authenticity of host '' can't be
established..."
  Perhaps a new command line options should be added to control behavior in
such situations?


+1.) A little bit about my self:
I am a 3rd year Computer Science student at the Budapest University of
Technology and Economics with a keen interest in computer network related
software. ( and hardware. ;)) I am comfortable with reading RFC-s and have
a good command of C.
I'm weirdly attracted to network protocols and free software, although I
have not contributed to open source projects yet. (I built a live linux
distro for running abandoneware dos games, but that's a different story. ;)


Thanks for the answers advance! ;)

Looking forward to work with you guys,

Geza