diff --git a/bookindex.md b/bookindex.md
index f2fc9905c..19e66be1d 100644
--- a/bookindex.md
+++ b/bookindex.md
@@ -305,7 +305,7 @@
 
  - name resolving: [Hostname resolving](protocols/network.md#hostname-resolving), [Handling build options](source/options.md#handling-build-options), [Available --write-out variables](usingcurl/verbose/writeout.md#available---write-out-variables), [Name resolve tricks with c-ares](usingcurl/connections/name.md#name-resolve-tricks-with-c-ares), [SOCKS proxy](usingcurl/proxies/socks.md#socks-proxy), [Connection reuse](transfers/conn/reuse.md#connection-reuse), [Name resolving](transfers/conn/names.md#name-resolving), [Proxy types](transfers/conn/proxies.md#proxy-types), [Available information](transfers/getinfo.md#available-information), [Different backends](internals/backends.md#different-backends)
  - --negotiate: [Network leakage](cmdline/passwords.md#network-leakage), [Authentication](http/auth.md#authentication)
- - .netrc: [Command line leakage](cmdline/passwords.md#command-line-leakage), [.netrc](usingcurl/netrc.md#sect--dot-netrc), [All options](transfers/options/all.md#all-options), [`<features>`](internals/tests/file-format.md#sect--less-than-features-greater-than)
+ - .netrc: [Command line leakage](cmdline/passwords.md#command-line-leakage), [.netrc](usingcurl/netrc.md#sect--dot-netrc), [All options](transfers/options/all.md#all-options), [`.netrc`](transfers/auth.md#sect--dot-netrc), [`<features>`](internals/tests/file-format.md#sect--less-than-features-greater-than)
  - --netrc-file: [Enable netrc](usingcurl/netrc.md#enable-netrc)
  - --netrc-optional: [Enable netrc](usingcurl/netrc.md#enable-netrc)
  - nghttp2: [nghttp2](build/deps.md#nghttp2), [Which libcurl version runs](libcurl/api.md#which-libcurl-version-runs)
@@ -348,7 +348,7 @@
 ## Q
 
  - -Q: [Quote](ftp/cmds.md#quote)
- - QUIC: [Establish a connection](protocols/network.md#establish-a-connection), [HTTPS](protocols/curl.md#https), [QUIC and HTTP/3](build/deps.md#quic-and-http-slash-3), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [Never spend more than this to connect](usingcurl/timeouts.md#never-spend-more-than-this-to-connect), [QUIC](http/versions/http3.md#quic), [Which libcurl version runs](libcurl/api.md#which-libcurl-version-runs), [HTTP/3](transfers/conn/how.md#http-slash-3), [Enable keep alive](transfers/conn/keepalive.md#enable-keep-alive), [Version 3 can be mandatory](libcurl-http/versions.md#version-3-can-be-mandatory)
+ - QUIC: [Establish a connection](protocols/network.md#establish-a-connection), [HTTPS](protocols/curl.md#https), [QUIC and HTTP/3](build/deps.md#quic-and-http-slash-3), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [Never spend more than this to connect](usingcurl/timeouts.md#never-spend-more-than-this-to-connect), [QUIC](http/versions/http3.md#quic), [Which libcurl version runs](libcurl/api.md#which-libcurl-version-runs), [HTTP/3](transfers/conn/how.md#http-slash-3), [Enable keep alive](transfers/conn/keepalive.md#enable-keep-alive), [Authentication](transfers/auth.md#authentication), [Version 3 can be mandatory](libcurl-http/versions.md#version-3-can-be-mandatory)
  - --quote: [Quote](ftp/cmds.md#quote)
 
 ## R
@@ -406,9 +406,9 @@
  - Safari: [Copy as curl](cmdline/copyas.md#copy-as-curl)
  - Schannel: [TLS libraries](build/tls.md#tls-libraries), [Native CA stores](usingcurl/tls/verify.md#native-ca-stores), [CA cert cache](libcurl/caches.md#ca-cert-cache), [`<features>`](internals/tests/file-format.md#sect--less-than-features-greater-than)
  - Scheme: [Connect to port numbers](protocols/network.md#connect-to-port-numbers), [FILE](protocols/curl.md#file), [Naming](source/style.md#naming), [librtmp](build/deps.md#librtmp), [Scheme](cmdline/urls/scheme.md#scheme), [Name and password](cmdline/urls/auth.md#name-and-password), [TCP vs UDP](cmdline/urls/port.md#tcp-vs-udp), [Browsers](cmdline/urls/browsers.md#browsers), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [Available --write-out variables](usingcurl/verbose/writeout.md#available---write-out-variables), [Proxy type](usingcurl/proxies/type.md#proxy-type), [SOCKS proxy](usingcurl/proxies/socks.md#socks-proxy), [Proxy authentication](usingcurl/proxies/auth.md#proxy-authentication), [TLS for emails](usingcurl/reademail.md#tls-for-emails), [Which libcurl version](libcurl/api.md#which-libcurl-version), [Proxy types](transfers/conn/proxies.md#proxy-types), [Available information](transfers/getinfo.md#available-information), [Authentication](libcurl-http/auth.md#authentication), [`CURLU_NON_SUPPORT_SCHEME`](helpers/url/parse.md#curlu_non_support_scheme), [`CURLU_DEFAULT_PORT`](helpers/url/get.md#curlu_default_port), [URLs](helpers/ws/urls.md#urls), [Get a response into memory](examples/getinmem.md#get-a-response-into-memory), [Protocol handler](internals/handler.md#protocol-handler), [Curl_handler](internals/structs.md#curl_handler)
- - SCP: [What protocols does curl support?](protocols/protocols.md#what-protocols-does-curl-support), [SCP](protocols/curl.md#scp), [SSH libraries](build/deps.md#ssh-libraries), [Supported schemes](cmdline/urls/scheme.md#supported-schemes), [Version](cmdline/curlver.md#version), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [Compression](usingcurl/downloads/compression.md#compression), [Protocols allowing upload](usingcurl/uploads.md#protocols-allowing-upload), [SCP and SFTP](usingcurl/scpsftp.md#scp-and-sftp), [All options](transfers/options/all.md#all-options), [Curl_handler](internals/structs.md#curl_handler), [`<server>`](internals/tests/file-format.md#sect--less-than-server-greater-than)
- - security: [curl-announce](project/maillists.md#curl-announce), [Commercial support](project/support.md#commercial-support), [Security](project/security.md#security), [Trust](project/trust.md#trust), [Security](protocols/network.md#security), [How much do protocols change?](protocols/protocols.md#how-much-do-protocols-change), [FTPS](protocols/curl.md#ftps), [docs](source/layout.md#docs), [Reporting vulnerabilities](source/reportvuln.md#reporting-vulnerabilities), [`http_proxy` in lower case only](usingcurl/proxies/env.md#http_proxy-in-lower-case-only), [TLS](usingcurl/tls.md#tls), [Ciphers](usingcurl/tls/ciphers.md#ciphers), [Enable TLS](usingcurl/tls/enable.md#enable-tls), [TLS versions](usingcurl/tls/versions.md#tls-versions), [HTTP/0.9](http/versions/http09.md#http-slash-0-dot-9), [HSTS](http/hsts.md#hsts), [Protocol version](transfers/options/tls.md#protocol-version), [All options](transfers/options/all.md#all-options), [HSTS](transfers/callbacks/hsts.md#hsts), [URLs](helpers/ws/urls.md#urls), [HSTS](internals/caches.md#hsts)
- - SFTP: [What protocols does curl support?](protocols/protocols.md#what-protocols-does-curl-support), [SFTP](protocols/curl.md#sftp), [SSH libraries](build/deps.md#ssh-libraries), [Supported schemes](cmdline/urls/scheme.md#supported-schemes), [Version](cmdline/curlver.md#version), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [Trace options](usingcurl/verbose/trace.md#trace-options), [Compression](usingcurl/downloads/compression.md#compression), [Protocols allowing upload](usingcurl/uploads.md#protocols-allowing-upload), [SCP and SFTP](usingcurl/scpsftp.md#scp-and-sftp), [All options](transfers/options/all.md#all-options), [Curl_handler](internals/structs.md#curl_handler), [`<server>`](internals/tests/file-format.md#sect--less-than-server-greater-than), [Run a range of tests](internals/tests/run.md#run-a-range-of-tests)
+ - SCP: [What protocols does curl support?](protocols/protocols.md#what-protocols-does-curl-support), [SCP](protocols/curl.md#scp), [SSH libraries](build/deps.md#ssh-libraries), [Supported schemes](cmdline/urls/scheme.md#supported-schemes), [Version](cmdline/curlver.md#version), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [Compression](usingcurl/downloads/compression.md#compression), [Protocols allowing upload](usingcurl/uploads.md#protocols-allowing-upload), [SCP and SFTP](usingcurl/scpsftp.md#scp-and-sftp), [All options](transfers/options/all.md#all-options), [Authentication](transfers/auth.md#authentication), [Curl_handler](internals/structs.md#curl_handler), [`<server>`](internals/tests/file-format.md#sect--less-than-server-greater-than)
+ - security: [curl-announce](project/maillists.md#curl-announce), [Commercial support](project/support.md#commercial-support), [Security](project/security.md#security), [Trust](project/trust.md#trust), [Security](protocols/network.md#security), [How much do protocols change?](protocols/protocols.md#how-much-do-protocols-change), [FTPS](protocols/curl.md#ftps), [docs](source/layout.md#docs), [Reporting vulnerabilities](source/reportvuln.md#reporting-vulnerabilities), [`http_proxy` in lower case only](usingcurl/proxies/env.md#http_proxy-in-lower-case-only), [TLS](usingcurl/tls.md#tls), [Ciphers](usingcurl/tls/ciphers.md#ciphers), [Enable TLS](usingcurl/tls/enable.md#enable-tls), [TLS versions](usingcurl/tls/versions.md#tls-versions), [HTTP/0.9](http/versions/http09.md#http-slash-0-dot-9), [HSTS](http/hsts.md#hsts), [Protocol version](transfers/options/tls.md#protocol-version), [All options](transfers/options/all.md#all-options), [HSTS](transfers/callbacks/hsts.md#hsts), [Authentication](transfers/auth.md#authentication), [URLs](helpers/ws/urls.md#urls), [HSTS](internals/caches.md#hsts)
+ - SFTP: [What protocols does curl support?](protocols/protocols.md#what-protocols-does-curl-support), [SFTP](protocols/curl.md#sftp), [SSH libraries](build/deps.md#ssh-libraries), [Supported schemes](cmdline/urls/scheme.md#supported-schemes), [Version](cmdline/curlver.md#version), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [Trace options](usingcurl/verbose/trace.md#trace-options), [Compression](usingcurl/downloads/compression.md#compression), [Protocols allowing upload](usingcurl/uploads.md#protocols-allowing-upload), [SCP and SFTP](usingcurl/scpsftp.md#scp-and-sftp), [All options](transfers/options/all.md#all-options), [Authentication](transfers/auth.md#authentication), [Curl_handler](internals/structs.md#curl_handler), [`<server>`](internals/tests/file-format.md#sect--less-than-server-greater-than), [Run a range of tests](internals/tests/run.md#run-a-range-of-tests)
  - --silent: [Progress meter](cmdline/progressmeter.md#progress-meter), [Error message](cmdline/exitcode.md#error-message)
  - SMTP: [What protocols does curl support?](protocols/protocols.md#what-protocols-does-curl-support), [SMTP](protocols/curl.md#smtp), [Without scheme](cmdline/urls/scheme.md#without-scheme), [Version](cmdline/curlver.md#version), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [Protocols allowing upload](usingcurl/uploads.md#protocols-allowing-upload), [Enable TLS](usingcurl/tls/enable.md#enable-tls), [Sending email](usingcurl/smtp.md#sending-email), [STARTTLS](transfers/options/tls.md#starttls), [All options](transfers/options/all.md#all-options), [`CURLU_GUESS_SCHEME`](helpers/url/parse.md#curlu_guess_scheme), [Variables](internals/tests/file-format.md#variables), [Test servers](internals/tests/servers.md#test-servers)
  - SMTPS: [What protocols does curl support?](protocols/protocols.md#what-protocols-does-curl-support), [SMTPS](protocols/curl.md#smtps), [TLS libraries](build/tls.md#tls-libraries), [Supported schemes](cmdline/urls/scheme.md#supported-schemes), [Version](cmdline/curlver.md#version), [Protocols allowing upload](usingcurl/uploads.md#protocols-allowing-upload), [Enable TLS](usingcurl/tls/enable.md#enable-tls)
@@ -420,7 +420,7 @@
  - --socks5-hostname: [SOCKS proxy](usingcurl/proxies/socks.md#socks-proxy)
  - --speed-limit: [Stop slow transfers](usingcurl/transfers/tooslow.md#stop-slow-transfers)
  - --speed-time: [Stop slow transfers](usingcurl/transfers/tooslow.md#stop-slow-transfers)
- - SSH: [SCP](protocols/curl.md#scp), [Select SSH backend](build/autotools.md#select-ssh-backend), [SSH libraries](build/deps.md#ssh-libraries), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [SCP and SFTP](usingcurl/scpsftp.md#scp-and-sftp), [Historic TELNET](usingcurl/telnet.md#historic-telnet), [Trace everything](libcurl/verbose.md#trace-everything), [All options](transfers/options/all.md#all-options), [SSH key](transfers/callbacks/sshkey.md#ssh-key), [Different backends](internals/backends.md#different-backends), [Curl_handler](internals/structs.md#curl_handler), [Variables](internals/tests/file-format.md#variables)
+ - SSH: [SCP](protocols/curl.md#scp), [Select SSH backend](build/autotools.md#select-ssh-backend), [SSH libraries](build/deps.md#ssh-libraries), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [SCP and SFTP](usingcurl/scpsftp.md#scp-and-sftp), [Historic TELNET](usingcurl/telnet.md#historic-telnet), [Trace everything](libcurl/verbose.md#trace-everything), [All options](transfers/options/all.md#all-options), [SSH key](transfers/callbacks/sshkey.md#ssh-key), [Authentication](transfers/auth.md#authentication), [Different backends](internals/backends.md#different-backends), [Curl_handler](internals/structs.md#curl_handler), [Variables](internals/tests/file-format.md#variables)
  - SSH backend: [Select SSH backend](build/autotools.md#select-ssh-backend)
  - SSL context callback: [All options](transfers/options/all.md#all-options)
  - SSLKEYLOGFILE: [TLS](usingcurl/tls.md#tls), [SSLKEYLOGFILE](usingcurl/tls/sslkeylogfile.md#sslkeylogfile), [Figure out what a browser sends](http/post/browsersends.md#figure-out-what-a-browser-sends)
@@ -436,7 +436,7 @@
  - --tftp-blksize: [TFTP options](usingcurl/tftp.md#tftp-options)
  - --tftp-no-options: [TFTP options](usingcurl/tftp.md#tftp-options)
  - --time-cond: [Check by modification date](http/conditionals.md#check-by-modification-date)
- - TLS: [Security](protocols/network.md#security), [How much do protocols change?](protocols/protocols.md#how-much-do-protocols-change), [GOPHERS](protocols/curl.md#gophers), [The URL converted to a request](protocols/http.md#the-url-converted-to-a-request), [Ubuntu and Debian](install/linux.md#ubuntu-and-debian), [lib/vtls](source/layout.md#lib-slash-vtls), [Handling build options](source/options.md#handling-build-options), [Select TLS backend](build/autotools.md#select-tls-backend), [TLS libraries](build/deps.md#tls-libraries), [TLS libraries](build/tls.md#tls-libraries), [Connection reuse](cmdline/urls/connreuse.md#connection-reuse), [Line 1: curl](cmdline/curlver.md#line-1-curl), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [More data](usingcurl/verbose/trace.md#more-data), [Available --write-out variables](usingcurl/verbose/writeout.md#available---write-out-variables), [Change the Host: header](usingcurl/connections/name.md#change-the-host-header), [Never spend more than this to connect](usingcurl/timeouts.md#never-spend-more-than-this-to-connect), [MITM proxy](usingcurl/proxies/mitm.md#mitm-proxy), [TLS](usingcurl/tls.md#tls), [Ciphers](usingcurl/tls/ciphers.md#ciphers), [Enable TLS](usingcurl/tls/enable.md#enable-tls), [TLS versions](usingcurl/tls/versions.md#tls-versions), [Verifying server certificates](usingcurl/tls/verify.md#verifying-server-certificates), [Certificate pinning](usingcurl/tls/pinning.md#certificate-pinning), [OCSP stapling](usingcurl/tls/stapling.md#ocsp-stapling), [Client certificates](usingcurl/tls/clientcert.md#client-certificates), [TLS auth](usingcurl/tls/auth.md#tls-auth), [TLS backends](usingcurl/tls/backends.md#tls-backends), [SSLKEYLOGFILE](usingcurl/tls/sslkeylogfile.md#sslkeylogfile), [SCP and SFTP](usingcurl/scpsftp.md#scp-and-sftp), [TLS for emails](usingcurl/reademail.md#tls-for-emails), [Caveats](usingcurl/mqtt.md#caveats), [HTTPS only](http/versions/http3.md#https-only), [HTTPS](http/https.md#https), [Figure out what a browser sends](http/post/browsersends.md#figure-out-what-a-browser-sends), [TLS fingerprinting](http/browserlike.md#tls-fingerprinting), [FTPS](ftp/ftps.md#ftps), [Trace everything](libcurl/verbose.md#trace-everything), [Caches](libcurl/caches.md#caches), [reuse handles](libcurl/performance.md#reuse-handles), [TLS options](transfers/options/tls.md#tls-options), [All options](transfers/options/all.md#all-options), [SSL context](transfers/callbacks/sslcontext.md#ssl-context), [HTTP proxy](transfers/conn/proxies.md#http-proxy), [Available information](transfers/getinfo.md#available-information), [URLs](helpers/ws/urls.md#urls), [Different backends](internals/backends.md#different-backends), [connection cache](internals/caches.md#connection-cache), [Variables](internals/tests/file-format.md#variables)
+ - TLS: [Security](protocols/network.md#security), [How much do protocols change?](protocols/protocols.md#how-much-do-protocols-change), [GOPHERS](protocols/curl.md#gophers), [The URL converted to a request](protocols/http.md#the-url-converted-to-a-request), [Ubuntu and Debian](install/linux.md#ubuntu-and-debian), [lib/vtls](source/layout.md#lib-slash-vtls), [Handling build options](source/options.md#handling-build-options), [Select TLS backend](build/autotools.md#select-tls-backend), [TLS libraries](build/deps.md#tls-libraries), [TLS libraries](build/tls.md#tls-libraries), [Connection reuse](cmdline/urls/connreuse.md#connection-reuse), [Line 1: curl](cmdline/curlver.md#line-1-curl), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [More data](usingcurl/verbose/trace.md#more-data), [Available --write-out variables](usingcurl/verbose/writeout.md#available---write-out-variables), [Change the Host: header](usingcurl/connections/name.md#change-the-host-header), [Never spend more than this to connect](usingcurl/timeouts.md#never-spend-more-than-this-to-connect), [MITM proxy](usingcurl/proxies/mitm.md#mitm-proxy), [TLS](usingcurl/tls.md#tls), [Ciphers](usingcurl/tls/ciphers.md#ciphers), [Enable TLS](usingcurl/tls/enable.md#enable-tls), [TLS versions](usingcurl/tls/versions.md#tls-versions), [Verifying server certificates](usingcurl/tls/verify.md#verifying-server-certificates), [Certificate pinning](usingcurl/tls/pinning.md#certificate-pinning), [OCSP stapling](usingcurl/tls/stapling.md#ocsp-stapling), [Client certificates](usingcurl/tls/clientcert.md#client-certificates), [TLS auth](usingcurl/tls/auth.md#tls-auth), [TLS backends](usingcurl/tls/backends.md#tls-backends), [SSLKEYLOGFILE](usingcurl/tls/sslkeylogfile.md#sslkeylogfile), [SCP and SFTP](usingcurl/scpsftp.md#scp-and-sftp), [TLS for emails](usingcurl/reademail.md#tls-for-emails), [Caveats](usingcurl/mqtt.md#caveats), [HTTPS only](http/versions/http3.md#https-only), [HTTPS](http/https.md#https), [Figure out what a browser sends](http/post/browsersends.md#figure-out-what-a-browser-sends), [TLS fingerprinting](http/browserlike.md#tls-fingerprinting), [FTPS](ftp/ftps.md#ftps), [Trace everything](libcurl/verbose.md#trace-everything), [Caches](libcurl/caches.md#caches), [reuse handles](libcurl/performance.md#reuse-handles), [TLS options](transfers/options/tls.md#tls-options), [All options](transfers/options/all.md#all-options), [SSL context](transfers/callbacks/sslcontext.md#ssl-context), [HTTP proxy](transfers/conn/proxies.md#http-proxy), [Authentication](transfers/auth.md#authentication), [Available information](transfers/getinfo.md#available-information), [URLs](helpers/ws/urls.md#urls), [Different backends](internals/backends.md#different-backends), [connection cache](internals/caches.md#connection-cache), [Variables](internals/tests/file-format.md#variables)
  - TLS backend: [Ubuntu and Debian](install/linux.md#ubuntu-and-debian), [lib/vtls](source/layout.md#lib-slash-vtls), [Select TLS backend](build/autotools.md#select-tls-backend), [Line 1: curl](cmdline/curlver.md#line-1-curl), [Available exit codes](cmdline/exitcode.md#available-exit-codes), [TLS](usingcurl/tls.md#tls), [Native CA stores](usingcurl/tls/verify.md#native-ca-stores), [Certificate pinning](usingcurl/tls/pinning.md#certificate-pinning), [OCSP stapling](usingcurl/tls/stapling.md#ocsp-stapling), [Client certificates](usingcurl/tls/clientcert.md#client-certificates), [TLS backends](usingcurl/tls/backends.md#tls-backends), [CA cert cache](libcurl/caches.md#ca-cert-cache), [SSL context](transfers/callbacks/sslcontext.md#ssl-context)
  - TODO: [Future](project/future.md#future), [Suggestions](source/contributing.md#suggestions)
  - --tr-encoding: [Compression](usingcurl/downloads/compression.md#compression), [Transfer encoding](http/response.md#transfer-encoding)