On Fri, 28 Nov 2003, Hrvoje Niksic wrote:
> > I find this wording a bit funny. What is a "non-SSL" proxy? CONNECT is the
> > defined way to speak SSL when using a http proxy...
>
> What if someone explicitly uses http_proxy=https://...? Or even
> https_proxy=https://...?
Ah, right! *That* is indeed a very-much-SSL proxy. I didn't consider that
case. I don't think it is ever used in practise.
> > The 'A2' encoded chunk needs the 'CONNECT' string then.
>
> I'm not sure I understand this.
Sorry, I cut down a bit too much on my wording. I meant that since the Digest
authentication hash uses the HTTP method string, you need to make sure that
'CONNECT' is the method used when you use Digest for this case.
But as you said, Digest is rarely used for proxy authentication.
--
-=- Daniel Stenberg -=- http://daniel.haxx.se -=-
ech`echo xiun|tr nu oc|sed 'sx\([sx]\)\([xoi]\)xo un\2\1 is xg'`ol
