Is it possible to connect to a proxy with an ssl (or otherwise encrypted) connection?

Support seems to vary depending on the browser. You should find the "Encrypted browser-Squid connection" section of the Squid documentation relevant. (Note that this is different from its SslBump feature.) More specifically, these links should be of interest:

  • http://dev.chromium.org/developers/design-documents/secure-web-proxy
  • https://bugzilla.mozilla.org/show_bug.cgi?id=378637

Alternatively, if the browser you're using doesn't support it, you could use something like stunnel to establish the connection to the proxy itself.


SSL certificates (The S in HTTPS) guarantees that there are no eavesdroppers between you and the server you are contacting, i.e. no proxies. Nevertheless, you could use the following hack:

  • Client starts HTTPS session
  • Proxy intercepts the call and returns an ad-hoc generated(possibly weak) certificate Ka, signed by a certificate authority that is unconditionally trusted by the client.
  • Proxy starts HTTPS session to target
  • Proxy verifies integrity of SSL certificate; displays error if the cert is not valid.
  • Proxy streams content, decrypts it and re-encrypts with it
  • Client displays stuff

I think I heard of a solution implementing this. Unfortunately, I can't remember its name.

Tags:

Proxy

Tls