Thread (7 messages) flat view 7 messages, 4 authors, 2016-06-16

Re: Default authentication over https?

From: Daniel Stenberg <hidden>
Date: 2016-06-16 02:18:47

On Wed, 13 Apr 2016, Jeff King wrote:
However, I don't think even that would give you what you want. Because I
think that even if we provide a credential, curl will make an initial
request (presumably to find out which auth type it should use, but that
is just a guess). I don't know if there is a way to convince curl to
stick the credential in the first request
curl supports this. but then you must do exactly that: tell libcurl to use 
that single auth method only. It will of course make it fail if you select the 
wrong method etc.

The unauthenticated first request is both to probe for which methods the 
server wants, but also works for the case when users provide credentials 
without the server actually ending up asking for them...

-- 

  / daniel.haxx.se
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help