hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ortwin Gl├╝ck <...@odi.ch>
Subject Re: DO NOT REPLY [Bug 37345] - ProxyCredentials disclosed to remote host
Date Fri, 04 Nov 2005 14:11:18 GMT


Oleg Kalnichevski wrote:
> On Fri, Nov 04, 2005 at 03:05:05PM +0100, Ortwin Gl?ck wrote:
> 
>>Sorry, Oleg,
>>
>>I don't understand this. Why does the presence of the 
>>Proxy-Authorization depend on the connection being SSL or not?
>>I think the Proxy-Authorization header must never be sent to the target 
>>host. Could you clarify this, please?
>>
> 
> Odi,
> 
> When the connection is non-transparent, the proxy will rewrite the
> request and remove the Proxy-Authorization header
> 
> Oleg

I see. Cheers.

Odi


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-dev-help@jakarta.apache.org


Mime
View raw message