curl/docs/cmdline-opts/proxy-ssl-allow-beast.md
Daniel Stenberg 65651dc02b
cmdline: expand proxy option explanations
- do less references to other options
- provide more specific text about proxies
- added more see-also references

Closes #13887
2024-06-05 10:35:56 +02:00

887 B

c SPDX-License-Identifier Long Help Added Category Multi See-also Example
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al. curl proxy-ssl-allow-beast Allow security flaw for interop for HTTPS proxy 7.52.0 proxy tls boolean
ssl-allow-beast
proxy
--proxy-ssl-allow-beast -x https://proxy $URL

--proxy-ssl-allow-beast

Do not work around a security flaw in the TLS1.0 protocol known as BEAST when communicating to an HTTPS proxy. If this option is not used, the TLS layer may use workarounds known to cause interoperability problems with some older server implementations.

This option only changes how curl does TLS 1.0 with an HTTPS proxy and has no effect on later TLS versions.

WARNING: this option loosens the TLS security, and by using this flag you ask for exactly that.

Equivalent to --ssl-allow-beast but used in HTTPS proxy context.