3 ms·
I would be very miffed if my application suddenly autodetected a proxy (whether it-dept or adversary installed) and decided to break the end-to-end security pro
by fulafel 4y ago
I would be very miffed if my application suddenly autodetected a proxy (whether it-dept or adversary installed) and decided to break the end-to-end security property of TLS that my app relied on. But maybe in the best case this would have been limited to tunneling (HTTP CONNECT) proxies that pass TLS traffic as-is?
But I guess this is just speculation now that it wasn't implemented.
- tyingq 4y agoI would guess curl would add a --autoproxy switch or similar.
- stjohnswarts 4y agoYeah I think the curl programmers are far too knowledgable to have proxy discovery set as a default.
- benmmurphy 4y agoI don’t think curl supports proxies that terminate TLS so it shouldn’t interfere with TLS end to end security.