3 ms·

A good non-technical explainer: https://medium.com/@nzdominic/what-is-httpoxy-65a33a8a1f4d#.qqum4q5qa https://medium.com/@nzdominic/what-is-httpoxy-65a33a8a1f4d

• vbernat 10y ago
  It says that API requests using TLS are not vulnerable. However, many applications won't do the appropriate certificate checking. If HTTP_PROXY is set to a mitm proxy, it can succeed.
  • kpcyrd 10y ago
    The reason why they aren't affected is that you need to set HTTPS_PROXY for https:// https://
    • lucb1e 10y ago
      I could imagine not all applications doing that, though.