Daniel Stenberg <[EMAIL PROTECTED]> writes: > On Tue, 30 Mar 2004, Hrvoje Niksic wrote: > >> * http.c (gethttp): Send the Proxy-Authorization header over >> non-SSL connections too. > > I couldn't really tell from this diff, but I thought I'd remind you: > > If you are using SSL over a proxy, you should not send the > Proxy-Authorization in the GET request, only in the CONNECT request.
I know -- in fact, implementing that was how I introduced the bug. :-) In the CVS code, the header was being sent *only* in the CONNECT request. Anyway, thanks for the reminder.
