curl/docs/cmdline-opts/proxy-ssl-allow-beast.md
Daniel Stenberg 65651dc02b
cmdline: expand proxy option explanations
- do less references to other options
- provide more specific text about proxies
- added more see-also references

Closes #13887
2024-06-05 10:35:56 +02:00

30 lines
887 B
Markdown

---
c: Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
SPDX-License-Identifier: curl
Long: proxy-ssl-allow-beast
Help: Allow security flaw for interop for HTTPS proxy
Added: 7.52.0
Category: proxy tls
Multi: boolean
See-also:
- ssl-allow-beast
- proxy
Example:
- --proxy-ssl-allow-beast -x https://proxy $URL
---
# `--proxy-ssl-allow-beast`
Do not work around a security flaw in the TLS1.0 protocol known as BEAST when
communicating to an HTTPS proxy. If this option is not used, the TLS layer may
use workarounds known to cause interoperability problems with some older
server implementations.
This option only changes how curl does TLS 1.0 with an HTTPS proxy and has no
effect on later TLS versions.
**WARNING**: this option loosens the TLS security, and by using this flag you
ask for exactly that.
Equivalent to --ssl-allow-beast but used in HTTPS proxy context.