From 3782a9f1cd07ede9e61e48918df9fe377285e103 Mon Sep 17 00:00:00 2001 From: yhirose Date: Fri, 16 Oct 2026 16:39:00 -0400 Subject: [PATCH] Document what follows a cross-host redirect Credentials and the client certificate stay behind; other headers, default ones included, go along as RFC 9110 15.4 has it, and so do the limits and the TLS settings. --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 74b218a4..a7ad6fbd 100644 --- a/README.md +++ b/README.md @@ -1391,6 +1391,8 @@ res = cli.Get("/"); res->status; // 200 ``` +On a redirect to another host, `Authorization`, `Cookie` and `Proxy-Authorization` are dropped along with the credentials set with `set_basic_auth()` and the like, and the client certificate is not presented. Other headers, the default ones included, go along (RFC 9110 ยง15.4), and so do the timeouts, the payload limit and the TLS verification settings. + ### Use a specific network interface > [!NOTE]