File Manager

003 File Manager

Current Path: /usr/local/share/doc/curl

usr / local / share / doc / curl /

📁 ..
📄 ALTSVC.md(1.08 KB)
📄 BINDINGS.md(5.44 KB)
📄 BUFREF.md(2.21 KB)
📄 BUG-BOUNTY.md(3.26 KB)
📄 BUGS.md(11.65 KB)
📄 CHECKSRC.md(6.41 KB)
📄 CIPHERS.md(10.93 KB)
📄 CODE_OF_CONDUCT.md(1.57 KB)
📄 CODE_REVIEW.md(5.76 KB)
📄 CODE_STYLE.md(7.53 KB)
📄 CONTRIBUTE.md(13.25 KB)
📄 CURL-DISABLE.md(2.15 KB)
📄 DEPRECATE.md(399 B)
📄 DYNBUF.md(2.5 KB)
📄 ECH.md(4.63 KB)
📄 EXPERIMENTAL.md(912 B)
📄 FAQ(65.37 KB)
📄 FEATURES.md(5.69 KB)
📄 GOVERNANCE.md(6.77 KB)
📄 HELP-US.md(3.88 KB)
📄 HISTORY.md(11.51 KB)
📄 HSTS.md(1.4 KB)
📄 HTTP-COOKIES.md(5.09 KB)
📄 HTTP2.md(4.47 KB)
📄 HTTP3.md(3.65 KB)
📄 HYPER.md(1.84 KB)
📄 INSTALL(315 B)
📄 INSTALL.md(21.26 KB)
📄 INTERNALS.md(42.85 KB)
📄 KNOWN_BUGS(43.34 KB)
📄 MAIL-ETIQUETTE(11.7 KB)
📄 MQTT.md(630 B)
📄 NEW-PROTOCOL.md(4.46 KB)
📄 PARALLEL-TRANSFERS.md(2.04 KB)
📄 README.md(495 B)
📄 RELEASE-PROCEDURE.md(3.24 KB)
📄 ROADMAP.md(854 B)
📄 RUSTLS.md(806 B)
📄 SECURITY-PROCESS.md(5.63 KB)
📄 SSL-PROBLEMS.md(3.96 KB)
📄 SSLCERTS.md(8.15 KB)
📄 THANKS(36.43 KB)
📄 TODO(46.71 KB)
📄 TheArtOfHttpScripting.md(27.56 KB)
📄 URL-SYNTAX.md(13.23 KB)
📄 VERSIONS.md(2.22 KB)
📁 libcurl
📄 options-in-versions(10.69 KB)

Editing: HSTS.md

# HSTS support

HTTP Strict-Transport-Security. Added as experimental in curl
7.74.0. Supported "for real" since 7.77.0.

## Standard

[HTTP Strict Transport Security](https://tools.ietf.org/html/rfc6797)

## Behavior

libcurl features an in-memory cache for HSTS hosts, so that subsequent
HTTP-only requests to a host name present in the cache will get internally
"redirected" to the HTTPS version.

## `curl_easy_setopt()` options:

- `CURLOPT_HSTS_CTRL` - enable HSTS for this easy handle
 - `CURLOPT_HSTS` - specify file name where to store the HSTS cache on close
  (and possibly read from at startup)

## curl cmdline options

- `--hsts [filename]` - enable HSTS, use the file as HSTS cache. If filename
   is `""` (no length) then no file will be used, only in-memory cache.

## HSTS cache file format

Lines starting with `#` are ignored.

For each hsts entry:

[host name] "YYYYMMDD HH:MM:SS"

The `[host name]` is dot-prefixed if it is a includeSubDomain.

The time stamp is when the entry expires.

I considered using wget's file format for the HSTS cache. However, they store the time stamp as the epoch (number of seconds since 1970) and I strongly disagree with using that format. Instead I opted to use a format similar to the curl alt-svc cache file format.

## Possible future additions

- `CURLOPT_HSTS_PRELOAD` - provide a set of preloaded HSTS host names
 - ability to save to something else than a file

003 File Manager

Editing: HSTS.md

Upload File

Create Folder