On Tue, 24 Oct 2017, Alibek Joraev wrote:

this would not work for all connection types. for example, for NTLM, connection should not be shared among handles, right? there was related vulnerability some time ago ( https://curl.haxx.se/docs/adv_20140129.html ).

We can still share NTLM authenticated connections, and we do. We just need to make sure that we only reuse connections that have the same credentials.

--

 / daniel.haxx.se
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html

Reply via email to