From: Daniel Stenberg Date: Thu, 14 Apr 2016 09:46:09 GMT Subject: Re: Default authentication over https? Message-ID: In-Reply-To: <20160413223613.GB10011@sigill.intra.peff.net> On Wed, 13 Apr 2016, Jeff King wrote: > However, I don't think even that would give you what you want. Because I > think that even if we provide a credential, curl will make an initial > request (presumably to find out which auth type it should use, but that > is just a guess). I don't know if there is a way to convince curl to > stick the credential in the first request curl supports this. but then you must do exactly that: tell libcurl to use that single auth method only. It will of course make it fail if you select the wrong method etc. The unauthenticated first request is both to probe for which methods the server wants, but also works for the case when users provide credentials without the server actually ending up asking for them... -- / daniel.haxx.se