4 ms·

What would be allowed after SSL? By default, does curl allow redirects to http:// http:// via -L? If so.. that's kinda sketchy from a security perspective. E

What would be allowed after SSL? By default, does curl allow redirects to http:// http:// via -L? If so.. that's kinda sketchy from a security perspective. Especially because the flag you've shown is very unwieldy.

dijit 2y ago
curl will not follow any redirects without -L, including from http to https. But -L is very useful, so being able to prevent downgrades has useful functionality to help restrict it.
- metadat 2y ago
  This has nothing to do with what I'm attempting to discuss.