Re: MITM and proxy messages [was: Call for Adoption: draft-song-dns-wireformat-http]

On Sun, Aug 07, 2016 at 07:25:22PM +0200, Walter H. wrote:
> On 06.08.2016 02:25, Mark Nottingham wrote:
> > Would this help?
> > 
> > https://mnot.github.io/I-D/proxy-explanation/
> > 
> > Keep in mind that only helps for configured proxies.
> > 
> configured proxies are not the bug; why not just simpy use plain HTML?
 
Except that if you try rejecting the CONNECT, the browsers just throw
up generic error about connection failed and will just plain discard
any payload the proxy sends.

(And pretty much the same for non-browsers, if those even support
CONNECT).


And for http://, yes, the page will be displayed in browsers,
but authority of response will be misinterpretted, creating other
problems. In non-browsers, this can really create a mess.


-Ilari

Received on Sunday, 7 August 2016 17:57:37 UTC