undefined | Better HN

0 pointsrahimnathwani12y ago0 comments

My question still stands, whether they are using a transparent or normal proxy.

If a proxy is used to intercept and modify HTTPS traffic, the server certificate used for the connection between the proxy and the client would be invalid (I mean it would not be signed by a CA trusted by the client). Desktop browsers report an error in response to this condition. I don't know about mobile safari.

How do they deal with this?

0 comments

1 comments · 1 top-level

sradu12y ago

Sorry for my late answer and for not understating the question initially.

We pass https traffic as is, we obviously can't look in it or manipulate it.

However most of the products (something like 98%) are on http connections.

j / k navigate · click thread line to collapse