[
https://issues.apache.org/jira/browse/NUTCH-3222?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sebastian Nagel updated NUTCH-3222:
-----------------------------------
Summary: HTTP protocols not to send authentication credentials when TLS/SSL
certificates are not verified (was: HTTP protocols not to skip authentication
when TLS/SSL certificates are not verified)
> HTTP protocols not to send authentication credentials when TLS/SSL
> certificates are not verified
> ------------------------------------------------------------------------------------------------
>
> Key: NUTCH-3222
> URL: https://issues.apache.org/jira/browse/NUTCH-3222
> Project: Nutch
> Issue Type: Bug
> Components: protocol
> Affects Versions: 1.23
> Reporter: Sebastian Nagel
> Priority: Major
> Fix For: 1.24
>
>
> HTTP protocols should not send any secrets for authentication as well as
> cookies, if TLS/SSL verification is off (http.tls.certificates.check =
> false). See also NUTCH-3221 and
> [stormcrawler#2079|https://github.com/apache/stormcrawler/issues/2079].
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
