3 ms·

Yes, WPAD (web proxy auto discover) is for locating a piece of javascript code specified by Proxy auto-config [1], which consists of a single javascript functio

by codys 10y ago

Yes, WPAD (web proxy auto discover) is for locating a piece of javascript code specified by Proxy auto-config [1], which consists of a single javascript function that is given the url & the host, and returns a proxy to use. 1: https://en.wikipedia.org/wiki/Proxy_auto-config https://en.wikipedia.org/wiki/Proxy_auto-config Edit: note that in addition to SOCKS proxies, this also allows one to provide HTTP proxies. I'm not familiar with the interaction of https traffic with HTTP proxies, but I'd hope browsers avoid using them? Anyone familiar with this care to comment? (specs are sparse in this area)

nandhp 10y ago
For SSL through an HTTP proxy, clients use HTTP CONNECT[1], which turns converts the HTTP connection into a plain tunnel to the given host and port. https://tools.ietf.org/html/rfc2616#section-9.9 https://tools.ietf.org/html/rfc2616#section-9.9 https://en.wikipedia.org/wiki/HTTP_tunnel https://en.wikipedia.org/wiki/HTTP_tunnel
revelation 10y ago
I knew WPAD existed but I figured it was just some static lookup. Quelle surprise when it's a hack of massive proportions. So much of this Netscape stuff just reeks of a "startup MVP", to put it mildly.
- billyhoffman 10y ago
  I don't mind startup MVP stuff, I mind when it goes on to becomes a "standard" with little to no modification. WPAD/PAC is one. See also the "api" for document.cookie, which entirely consists of assigning strings to document.cookie.
wtbob 10y ago
> Yes, WPAD (web proxy auto discover) is for locating a piece of javascript code specified by Proxy auto-config [1], which consists of a single javascript function that is given the url & the host, and returns a proxy to use. So DHCP can cause my browser to execute code. That is … completely and totally insane. I'm not saying you're wrong, but rather that you're right about about a world gone mad.

by codys 10y ago

nandhp 10y ago

For SSL through an HTTP proxy, clients use HTTP CONNECT[1], which turns converts the HTTP connection into a plain tunnel to the given host and port. https://tools.ietf.org/html/rfc2616#section-9.9 https://tools.ietf.org/html/rfc2616#section-9.9 https://en.wikipedia.org/wiki/HTTP_tunnel https://en.wikipedia.org/wiki/HTTP_tunnel

revelation 10y ago

I knew WPAD existed but I figured it was just some static lookup. Quelle surprise when it's a hack of massive proportions. So much of this Netscape stuff just reeks of a "startup MVP", to put it mildly.

billyhoffman 10y ago
I don't mind startup MVP stuff, I mind when it goes on to becomes a "standard" with little to no modification. WPAD/PAC is one. See also the "api" for document.cookie, which entirely consists of assigning strings to document.cookie.

wtbob 10y ago

> Yes, WPAD (web proxy auto discover) is for locating a piece of javascript code specified by Proxy auto-config [1], which consists of a single javascript function that is given the url & the host, and returns a proxy to use. So DHCP can cause my browser to execute code. That is … completely and totally insane. I'm not saying you're wrong, but rather that you're right about about a world gone mad.