credential files

[mark]

Nigel Wade wrote:
> m.roth2006 at rcn.com wrote:
>> Does anyone have any idea how a browser recognizes that a cite is
>> asking for a
>> credential file, and hands it back to it?
>>
>> For example, I go to a site, and firefox suddenly says "this sites
>> wants a credential -
>> is this the credential that you want to give it?" I've used a plugin
>> that shows me http
>> headers and responses, and see nothing where that happens.
>>
>> Links? Pointers? Clues for the poor?
> 
> What sort of credentials are you talking about? Is this SSL (https) with
> client certificate verification? If so it's part of the initial SSL
> handshake. The server asks the client to prove that it is who it says it
> is by supplying a valid, authenticated, certificate.
> 
YES! Please, please, HOW DOES IT ASK? Can I provide that in the original get,
as additional headers, or do I have to wait for a response, and then provide it?

I *was* just slogging through RFC ...damn, now I can't remember, 1136? whatever
that is, and was looking for something like this....

	mark