3 ms·

I've never seen this extra measure "curl --proto '=https' ..."

• ape4 2y ago
  Me neither - so I looked it up at https://curl.se/docs/manpage.html https://curl.se/docs/manpage.html With the equals it means only allow the named protocols.
  • metadat 2y ago
    What would be allowed after SSL? By default, does curl allow redirects to http:// http:// via -L? If so.. that's kinda sketchy from a security perspective. Especially because the flag you've shown is very unwieldy.
    • dijit 2y ago
      curl will not follow any redirects without -L, including from http to https. But -L is very useful, so being able to prevent downgrades has useful functionality to help restrict it.
      • metadat 2y ago
        This has nothing to do with what I'm attempting to discuss.
• deleted 2y ago
  [deleted]
• guywald 2y ago
  Yep, this is auto-generated by cargo-dist (https://opensource.axo.dev/cargo-dist/book/ https://opensource.axo.dev/cargo-dist/book/)