[ ] mention thread-unsafety of libcurl (that is, the need for global initialization)
[ ] try to get rid of openssl dependency (bignum http://gmplib.org/, DH http://beecrypt.sourceforge.net/)
