Re: Proxy Tunneling (via the HTTP CONNECT method)
Re: Proxy Tunneling (via the HTTP CONNECT method)
- Subject: Re: Proxy Tunneling (via the HTTP CONNECT method)
- From: Wade Tregaskis <email@hidden>
- Date: Fri, 7 Nov 2003 16:19:16 +1100
Some proxies restrict it to 443 only, some other even check that the
traffic on 443 is SSL. Obviously they can't do that entirely as then
there could be a man-in-the-middle attack on the SSL session, but those
which do look at the handshake to see if it looks like SSL.
Note that you can usually get the network admin to provide an open
CONNECT relay by pointing out you need it for proxied CVS access
(assuming you live in the deep dark ages of university networks, where
all access is often HTTP-proxied-only).
I'm yet to encounter a proxy that checks the stream itself... can you
put forward any in particular as examples?
Wade Tregaskis
-- Sed quis custodiet ipsos custodes?
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.