On 5/15/2017 8:57 AM, Timothe Litt wrote:
> I had reason to use curl to interact with a service that requires a
> secret key in
> a (proprietary) authorization header.
>
> As far as I can tell, the only way to specify the header is with -H,
> which works.
>
> But it has the unfortunate side-effect of showing up in a 'ps' listing
> since it's on
> the command line. This can reveal the authorization secrets to other system
> users, which is not good.
>
> --config might be a work-around, but would require finding and merging the
> 'real' curlrc into a temporary file - and securing that..

Even if you use --config [1] curl will still read from the default curlrc.

[1]: https://curl.haxx.se/docs/manpage.html#-K

-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2017-05-15