Re: NTLM question

Robert Collins wrote:

> I thought the child was the one closed to the end user? In which case
> the child creates the Proxy auth challenge and consumes the response.

Exactly. HTTP does not care how the child finds the credentials required to log on to
the parent.

> So we are allowed to create X-Squid-Credentials=robertc and add that to
> our request to the parent, and have it treat the username as being
> robertc. (If we don't choose to regenerate a new proxy-authorisation
> header for the next hop.)

Sure, but we should use the proxy-authorization header for this.

--
Henrik