git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Handle HTTP error 511 Network Authentication Required (standard secure proxy authentification/captive portal detection)

From
NMNicolas Mailhot <nicolas.mailhot@laposte.net>
Date
Feb 19, 2012, 21:03 UTC
Message-ID
<4b8f33ba4c870528a82ab85d6dad68bd.squirrel@arekh.dyndns.org>

Since http://code.google.com/p/chromium/issues/detail?id=7338 and https://bugzilla.mozilla.org/show_bug.cgi?id=479880

there is no clean way for a proxy or captive portal to get a web client to display an authentication dialog when user credentials expire while he is browsing on an https url.

(to be sure, the previous methods were insecure and hackish but they existed because nothing better was available)

The IETF finally set up to fix this problem and defined a standard HTTP error that lets access control equipments tell the web client authentication or re-authentication is needed and where the authentication form is located.

http://tools.ietf.org/id/draft-nottingham-http-new-status-04.txt

→ <http://www.rfc-editor.org/queue2.html#draft-nottingham-http-new-status> (the spec is approved and in the queue for publication as RFC)

Please add error 511 handling in git, so git users that try to access external git repositories over http can authenticate on the corporate proxy

Next: Jeff King
Message 1 of 14 in “Handle HTTP error 511 Network Authentication Required (standard secure proxy authentification/captive portal detection)”
  1. Nicolas MailhotFeb 19, 2012
  2. Jeff KingFeb 20, 2012
  3. Nicolas MailhotFeb 20, 2012
  4. Jeff KingFeb 20, 2012
  5. Nicolas MailhotFeb 20, 2012
  6. Jeff KingFeb 20, 2012
  7. Nicolas MailhotFeb 20, 2012
  8. Jeff KingFeb 20, 2012
  9. Nicolas MailhotFeb 20, 2012
  10. Jeff KingFeb 20, 2012
  11. Nicolas MailhotFeb 20, 2012
  12. Daniel StenbergFeb 20, 2012
  13. Jeff KingFeb 20, 2012
  14. Junio C HamanoFeb 20, 2012

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.