4 ms·
> Furthermore, if one of Google's proxy servers is compromised, the threat actor can see and manipulate the traffic going through it. Wait what? They are plann
by xg15 3y ago
> Furthermore, if one of Google's proxy servers is compromised, the threat actor can see and manipulate the traffic going through it.
Wait what? They are planning to proxy the cleartext, not https?
- DistractionRect 3y agoNope, per the proposal [0] linked in the article: > the proxy and network intermediaries are not privy to the contents of the traffic [...] There is an end-to-end encrypted tunnel via TLS, from Chrome to the destination server. [0] https://github.com/GoogleChrome/ip-protection#core-requirements https://github.com/GoogleChrome/ip-protection#core-requireme...
- xg15 3y agoOk, that makes more sense. Thanks!