Initiating a Secure HTTP Transaction
Because Secure HTTP does not require the multiple messages that an SSL handshake requires, initiating Secure HTTP from an HTML link is much more complex. Whereas an SSL link is simply an ordinary link that begins with https:// rather than http://, a Secure HTTP link includes a great deal of information required for the negotiation of cryptographic options. The following gives an example HTML link:
<a href=”shttp://httphandbook.org/” dn=”CN=Shiflett CA, O=HTTP, Inc., C=US” cryptopts=”SHTTP-Privacy-Domains: recv-optional=MOSS, CMS; orig-required=CMS SHTTP-Certificate-Types: recv-optional=X.509; orig-required=X.509 SHTTP-Key-Exchange-Algorithms: recv-required=DH; orig-optional=Inband,DH SHTTP-Signature-Algorithms: ...
Get HTTP Developer’s Handbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
