Quantcast
Channel: Active questions tagged https - Stack Overflow
Viewing all articles
Browse latest Browse all 1634

Can a forward http proxy server decrypt HTTPS traffic? [closed]

$
0
0

Can a forward http proxy server decrypt HTTPS traffic?

Without considering special cases such as man-in-the-middle attacks or certificate signing, just discussing under normal usage conditions.

Some materials I've read state that when initiating a request, a forward proxy protocol uses the CONNECT method to establish a TCP channel.

Afterwards, the http proxy server merely forwards TCP packets, so the forward http proxy server cannot parse the upper-layer SSL or HTTP traffic.

My confusion is: if this is indeed the case:

  1. why does the remote server will see the client's request IP as theproxy server's IP, instead of the original one?
  2. Since a TCP channel is opened, all protocols above TCP, includingWS,WSS,RTMP, etc., should be supported, and the http proxy serverwouldn't be able to determine what actual protocol is being used.Sowhy can some http proxy servers support HTTPS but not WSS? How doesthe http proxy server differentiate between the upper-layerprotocols?
  3. Also, if a forward HTTP proxy server can open a TCP channel tosupport all upper-layer protocols, what is the purpose of theSOCKS4/SOCKS5 protocols? Why do some client applications require aSOCKS4/SOCKS5 proxy server to function properly instead of an HTTPproxy server?

Viewing all articles
Browse latest Browse all 1634

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>