httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Puskás Zsolt ( Errotan )" <erro...@gmail.com>
Subject [users@httpd] Browser sends complete URL before SSL ?
Date Tue, 10 Apr 2007 15:16:56 GMT
Hi all.
 
 I have a working apache2 server with ssl and I thought about if a client 
browser connects to the server with the URL like 
https://www.example.com/somedir/file.html the browser sends the full url in 
plaintext or connects to example.com encrypts the channel and then sends the 
remaining /somedir/file.html ? If it sends in plaintext I have to rewrite 
lots of php scripts for security :( .

Mime
View raw message