Buy commercial curl support from
WolfSSL. We help you work out your issues, debug your libcurl
applications, use the API, port to new platforms, add new features and more.
With a team lead by the curl founder himself.
Re: Help: TLS server receives a large amount of Authorization information along with application data
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Jason Qian via curl-users <curl-users_at_lists.haxx.se>
Date: Sat, 30 Mar 2024 17:05:12 -0400
Thanks Daniel,
it makes sense to me.
On Fri, Mar 29, 2024 at 5:52 PM Daniel Stenberg <daniel_at_haxx.se> wrote:
> On Fri, 29 Mar 2024, Jason Qian via curl-users wrote:
>
> > curl_easy_setopt(_curl, CURLOPT_HTTPAUTH, CURLAUTH_GSSNEGOTIATE);
> >
> > This seems an unnecessary configuration, if SSL is enabled ?
>
> Why so?
>
> TLS is for connection layer security. Negotiate is for HTTP layer
> authorization. They are often combined.
>
> But if you don't need Negotiate auth, then just drop it.
>
> --
>
> / daniel.haxx.se
> | Commercial curl support up to 24x7 is available!
> | Private help, bug fixes, support, ports, new features
> | https://curl.se/support.html
>
Date: Sat, 30 Mar 2024 17:05:12 -0400
Thanks Daniel,
it makes sense to me.
On Fri, Mar 29, 2024 at 5:52 PM Daniel Stenberg <daniel_at_haxx.se> wrote:
> On Fri, 29 Mar 2024, Jason Qian via curl-users wrote:
>
> > curl_easy_setopt(_curl, CURLOPT_HTTPAUTH, CURLAUTH_GSSNEGOTIATE);
> >
> > This seems an unnecessary configuration, if SSL is enabled ?
>
> Why so?
>
> TLS is for connection layer security. Negotiate is for HTTP layer
> authorization. They are often combined.
>
> But if you don't need Negotiate auth, then just drop it.
>
> --
>
> / daniel.haxx.se
> | Commercial curl support up to 24x7 is available!
> | Private help, bug fixes, support, ports, new features
> | https://curl.se/support.html
>
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-users Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2024-03-30