Please separate "secure" feature into a different crate

[seanmonstar]

I realize its an optional feature, but even libraries that don't care care about signing cookies are still disrupted when breaking changes of ring are released (for example, seanmonstar/reqwest#517). If they were separate crates, the core Cookie API could be more stable, and then only cookie-secure (naming is hard) would ever need to update for new ring versions.

[ignatenkobrain]

For the Fedora, we would appreciate if we could get an option to use openssl or native-tls or whatsoever because we are not willing to package another crypto-library (ring). I don't have anything against code or person, but we just try to avoid yet another crypto libraries.

[newpavlov]

Considering that this crate no longer depends on ring, is it still an issue? (IIRC Fedora already packages some RustCrypto crates)

[SergioBenitez]

I'm going to assume this is no longer issue since we no longer depend on ring; please correct me if I'm wrong!