home.social

#sansio — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #sansio, aggregated by home.social.

fetched live
  1. We just merged a new trust backend in siotls: Windows! Thanks Martin for its first major contribution.

    Users can now verify the server and client certificates using Windows's store of root CA and also benefit from the native OS verification polices and those installed via an active directory.

    A new crypto backend using Windows's crypto API is coming soon.

    #siotls is our #opensource, pure #python, #sansio and crypto agnostic implementation of #TLS 1.3. Check it out: codeberg.org/drlazor8/siotls

  2. Just released multipart-2.0.0 to #pypi.

    This is a fast and robust #Python parser for multipart/form-data (HTTP form requests) supporting both non-blocking #ASGI and blocking #WSGI applications.

    changelog: multipart.readthedocs.io/en/la

    pypi: pypi.org/project/multipart/

    And when I say 'fast' I mean it: defnull.de/2026/python-multipa

    #SansIO

  3. The 'multipart' #python library got an independent #security audit and I only know about that because they found something -> CVE-2026-28356

    This is great, actually! Someone looked into it so thoroughly that they found an obscure single-character issue in a regular expression ... and didn't find anything else! Which means I can now be really confident about the security of this library. Nice!

    #cve #infosec #sansio

  4. Just released multipart 1.0 on #pypi

    pypi.org/project/multipart/
    github.com/defnull/multipart/

    For this release I completely re-wrote the multipart/form-data parser, this time as an incremental #SansIO (non-blocking) parser suitable for #asyncio or other time or memory constrained environments. It's also really fast now (~3GB/s). Nice enough to justify a 1.0 release.

    The entire package is distributed as a pure #Python single-file module with no dependencies, as usual ;)

  5. I rewrote my #foss implementation of a #python #multipart form data parser as a #sansio (push based #nonblocking ) parser, and it is now not only suitable for #async applications, but also 2x to10x faster than the old (blocking) implementation. Was a ton of work, but totally worth it. Release will follow later this week.

    github.com/defnull/multipart/p