Re: Default authentication over https?

From: Daniel Stenberg <daniel@haxx.se>
Date: Apr 14, 2016, 09:46 UTC
Message-ID: <alpine.DEB.2.20.1604141142190.23813@tvnag.unkk.fr>
In-Reply-To: <20160413223613.GB10011@sigill.intra.peff.net>

On Wed, 13 Apr 2016, Jeff King wrote:

Show 5 quoted lines

> However, I don't think even that would give you what you want. Because I
> think that even if we provide a credential, curl will make an initial
> request (presumably to find out which auth type it should use, but that
> is just a guess). I don't know if there is a way to convince curl to
> stick the credential in the first request

curl supports this. but then you must do exactly that: tell libcurl to use that single auth method only. It will of course make it fail if you select the wrong method etc.

The unauthenticated first request is both to probe for which methods the server wants, but also works for the case when users provide credentials without the server actually ending up asking for them...

-- 
  / daniel.haxx.se