Re: [Phplib-users] Re: latest snapshot

[Michael C. <mdc...@mi...>]

On Wed, Nov 06, 2002 at 10:41:56PM +0100, Giancarlo wrote:
> the requested url  passes in cleartext, even with SSL
 
If that were the case, we could do name-based virtual hosting with ssl.
 
When you use SSL, the entire connection is encrypted.  If you want to
see this in action, use the openssl command on a unix machine (with
openssl installed) to connect to a web server:
 
% openssl s_client -connect www.hotmail.com:443
{bunch of information about the certificate and connection}
HEAD / HTTP/1.0
 
HTTP/1.1 302 Redirected
Server: Microsoft-IIS/5.0
Date: Thu, 07 Nov 2002 16:11:40 GMT
Location: https://lc1.law5.hotmail.passport.com/cgi-bin/login
 
read:errno=0
%
 
Note that the "HEAD / HTTP/1.0" is the request, and "/" is the URL.
 
Michael
--
Michael Darrin Chaney
mdc...@mi...
http://www.michaelchaney.com/