Download
Browse source Changelog tiny-curl
Documentation
Project   Bug Bounty   Help us   Known bugs   TODO Protocols   CA bundle   HTTP Cookies   HTTP/2   SSL Certs Releases   Security   Version numbers   Vulnerabilities curl tool   man page   Tutorial   HTTP scripting Who and Why
libcurl
ABI API Competitors Examples Features Mailing list Related libs Using libcurl Tutorial Testimonials
Get Help
curl-library curl-users Mailing lists Book: Everything curl Video presentations Report a bug Paid support
Development
Autobuilds Code review Code style Contribute Dashboard Deprecate Internals Release Notes Release Procedure Roadmap Run Tests Security Process Specifications Test curl
News
Changelog Release table
curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: Thoughts on HSTS

From: Kamil Dudka via curl-library <curl-library_at_cool.haxx.se>
Date: Tue, 01 Sep 2020 09:43:09 +0200

On Monday, August 31, 2020 11:56:43 PM CEST Daniel Stenberg via curl-library
wrote:
> Hi!
>
> HTTP Strict Transport Security (HSTS) is (simply put) a way for an HTTPS
> server to say that the host name should not be accessed over HTTP, only
> HTTPS - for a set number of seconds into the future.
>
> I've started to work on an implementation for curl and while doing so, I've
> put down some ideas in the wiki on how to interface this from curl and
> libcurl. I'm interested in feedback:
>
> https://github.com/curl/curl/wiki/HSTS

The proposed interface looks reasonable to me.

One minor remark: Why is `--hsts .` going to be used to specify in-memory mode
when `--alt-svc ""` is already being used to specify in-memory mode elsewhere?

Kamil

> (In a completely unscientific poll on twitter, 60% of the 559 persons who
> answered said they'd like to see HSTS support added to curl:
> https://twitter.com/bagder/status/1299357395357925376)

-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2020-09-01