2 ms·
There is a fantastic paper on how these proxies often lower security: "The Security Impact of HTTPS Interception" [1]. The paper also provides some interesting
by move-on-by 8y ago
There is a fantastic paper on how these proxies often lower security: "The Security Impact of HTTPS Interception" [1]. The paper also provides some interesting ways of detecting this type of proxy on the server (and client too - although a client should know if they have custom trusted certs). mitm.watch has implemented the details of the paper.
[1] https://jhalderm.com/pub/papers/interception-ndss17.pdf https://jhalderm.com/pub/papers/interception-ndss17.pdf
[2] https://mitm.watch/ https://mitm.watch/