3 ms·
This might sound like a stupid question, but unless I am grossly under-informed, with HTTPS, all a proxy server can do is forward the connection and the data. T
by krylon 12y ago
This might sound like a stupid question, but unless I am grossly under-informed, with HTTPS, all a proxy server can do is forward the connection and the data.
The proxy could not see the URL(s) being requested, so caching is not going to work. Or is it?
- creshal 12y agoThe proxy can MITM the connection, as long as the browser accepts the proxy's certificate. Corporate environments tend to have their own CA infrastructure, so this isn't much of a problem for them.
- rlpb 12y ago> Corporate environments tend to have their own CA infrastructure, so this isn't much of a problem for them. That's a very broad statement. Some corporate environments certainly do, and so this isn't much of a problem for them. But some corporate environments certainly do not, and so this is a problem for them. What you're essentially doing here is requiring that all corporate environments that don't currently have a CA infrastructure deploy one instead of using HTTP caching that works today. You're positively encouraging CA MITMing here.
- Dylan16807 12y ago>You're positively encouraging CA MITMing here. Internal to a business that is already MitMing everything, yes. Is that strange?