3 ms·
After a bit more reading I realize where the misunderstanding is. The proxy is just a regular HTTP proxy. You coerce the client into using it using some sort of
by stanleydrew 14y ago
After a bit more reading I realize where the misunderstanding is. The proxy is just a regular HTTP proxy. You coerce the client into using it using some sort of forced auto-discovery protocol which would be transparent to the user. Then the 407 trick makes sense to get JavaScript to execute in the "secure" page's context, since an HTTP proxy wouldn't have access to the response content of a request made over HTTPS.