Is PHP curl to HTTPS secure?

Question

I read these two things:

• Sending data from HTTP to HTTPS is not safe.
• Curl is as secure as a normal HTTP request.

Putting these together, would sending a password to an HTTPS server through curl be insecure? Do both servers need HTTPS in order to be secure?

Answer 1

Using curl in php is safe as long as you don't disabled the certificate verification.

Do not touch CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER, their default values are the secure ones.

https://secure.php.net/manual/fr/function.curl-setopt.php