httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jesse Ross <jr...@broad.mit.edu>
Subject Re: [users@httpd] Browser sends complete URL before SSL ?
Date Tue, 10 Apr 2007 16:11:34 GMT
No plaintext; that's what SSL does.


Puskás Zsolt ( Errotan ) wrote:
> Hi all.
>  
>  I have a working apache2 server with ssl and I thought about if a client 
> browser connects to the server with the URL like 
> https://www.example.com/somedir/file.html the browser sends the full url in 
> plaintext or connects to example.com encrypts the channel and then sends the 
> remaining /somedir/file.html ? If it sends in plaintext I have to rewrite 
> lots of php scripts for security :( .

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message