mirror/curl
2
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2024-12-09 06:30:06 +08:00
Code Issues Packages Projects Releases Wiki Activity
923f7f8ce5
curl/docs/cmdline-opts/insecure.md
Daniel Stenberg 6e494a2390
docs: more language cleanups 
- present tense
- avoid bad words

Closes #13003
2024-02-27 16:19:43 +01:00

1.4 KiB
Raw Blame History

c SPDX-License-Identifier Long Short Help Protocols Category Added Multi See-also Example
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al. curl insecure k Allow insecure server connections TLS SFTP SCP tls sftp scp 7.10 boolean
proxy-insecure
cacert
capath
--insecure $URL

--insecure

By default, every secure connection curl makes is verified to be secure before the transfer takes place. This option makes curl skip the verification step and proceed without checking.

When this option is not used for protocols using TLS, curl verifies the server's TLS certificate before it continues: that the certificate contains the right name which matches the hostname used in the URL and that the certificate has been signed by a CA certificate present in the cert store. See this online resource for further details: https://curl.se/docs/sslcerts.html

For SFTP and SCP, this option makes curl skip the known_hosts verification. known_hosts is a file normally stored in the user's home directory in the ".ssh" subdirectory, which contains hostnames and their public keys.

WARNING: using this option makes the transfer insecure.

When curl uses secure protocols it trusts responses and allows for example HSTS and Alt-Svc information to be stored and used subsequently. Using --insecure can make curl trust and use such information from malicious servers.