HTTP HTTP GET HTTP proxy HTTP proxy Digest auth HTTP Digest auth # Server-side # this is returned first since we get no proxy-auth HTTP/1.1 407 Authorization Required to proxy me my dear swsclose Proxy-Authenticate: Digest realm="weirdorealm", nonce="12345" And you should ignore this data. # then this is returned since we get no server-auth HTTP/1.1 401 Authorization to the remote host as well swsbounce swsclose WWW-Authenticate: Digest realm="realmweirdo", nonce="123456" you should ignore this data too HTTP/1.1 200 OK swsclose Server: no Content-Length: 15 Nice auth sir! HTTP/1.1 407 Authorization Required to proxy me my dear swsclose Proxy-Authenticate: Digest realm="weirdorealm", nonce="12345" HTTP/1.1 401 Authorization to the remote host as well swsbounce swsclose WWW-Authenticate: Digest realm="realmweirdo", nonce="123456" HTTP/1.1 200 OK swsclose Server: no Content-Length: 15 Nice auth sir! # Client-side http !SSPI crypto proxy HTTP with proxy-requiring-Digest to site-requiring-Digest http://data.from.server.requiring.digest.hohoho.com/168 --proxy http://%HOSTIP:%HTTPPORT --proxy-user foo:bar --proxy-digest --digest --user digest:alot # Verify data after the test has been "shot" GET http://data.from.server.requiring.digest.hohoho.com/168 HTTP/1.1 Host: data.from.server.requiring.digest.hohoho.com User-Agent: curl/%VERSION Accept: */* Proxy-Connection: Keep-Alive GET http://data.from.server.requiring.digest.hohoho.com/168 HTTP/1.1 Host: data.from.server.requiring.digest.hohoho.com Proxy-Authorization: Digest username="foo", realm="weirdorealm", nonce="12345", uri="/168", response="fb8608e00ad9239a3dedb14bc8575976" User-Agent: curl/%VERSION Accept: */* Proxy-Connection: Keep-Alive GET http://data.from.server.requiring.digest.hohoho.com/168 HTTP/1.1 Host: data.from.server.requiring.digest.hohoho.com Proxy-Authorization: Digest username="foo", realm="weirdorealm", nonce="12345", uri="/168", response="fb8608e00ad9239a3dedb14bc8575976" Authorization: Digest username="digest", realm="realmweirdo", nonce="123456", uri="/168", response="ca87f2d768a231e2d637a55698d5c416" User-Agent: curl/%VERSION Accept: */* Proxy-Connection: Keep-Alive