cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: -k switch is again secure and crypted

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Sat, 16 Sep 2006 13:35:14 +0200 (CEST)

On Sat, 16 Sep 2006, Dispo wrote:

> if i use:
> CURLOPT_SSL_VERIFYPEER false
> CURLOPT_SSL_VERIFYHOST false
> or
> -k switch

> the connection is secure and not check only certificate?
> the data are sent crypted?

The data is encrypted, yes, but since you don't know you're talking to the
correct server with -k, it is _not_ secure.

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html
Received on 2006-09-16