Answer the question
In order to leave comments, you need to log in
Is it safe to proxy data in curl to https addresses?
In PHP, using Curl and http proxies, I log in and do various actions on https:// addresses.
Is it safe?
In that sense, is it possible on the proxy side to intercept passwords, etc.?
//настройки curl обычные
curl_setopt($this->curl, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($this->curl, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($this->curl, CURLOPT_COOKIEJAR, $this->cookieFile);
curl_setopt($this->curl, CURLOPT_COOKIEFILE, $this->cookieFile);
curl_setopt($this->curl, CURLINFO_HEADER_OUT, true);
//вызываю так
curl_setopt($this->curl, CURLOPT_URL,'https://domain.com/');
$this->html = curl_exec($this->curl);
Answer the question
In order to leave comments, you need to log in
judging by the answer to a similar question on stackoverlow, yes it is safe
stackoverflow.com/questions/20390369/what-does-the...
HTTPS encrypts from the server to the client, in case of MITM on the proxy, the client will get a certificate error. So it is safe if the site has a valid certificate from a trusted CA, and even safer - to compare the hash of the certificate obtained in a known reliable way (because it is theoretically possible to obtain a trusted certificate for MITM - for example, from the CA of non-democratic countries by the authorities of these countries).
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question