What happens with HTTPS traffic? #2

Closed
asmedrano opened this Issue Oct 9, 2012 · 2 comments

Projects

None yet

2 participants

@asmedrano

Hey thanks for sharing code!
I don't know a ton about using Tornado as a proxy and I was just wondering what happens with HTTPS traffic.
Should I think of this like a Man in the Middle type situation?

@senko
Owner
senko commented Oct 10, 2012

If CONNECT is used to connect to HTTPS proxy, it should actually work in the sense that tornado-proxy will just shuffle encrypted bytes around, and the server certificate used is of the real HTTP server.

It's not MitM because in this case the proxy never sees the contents.

If you use it as HTTP (POST/GET) proxy, then it'll terminate the SSL for you, ie it'll make requests from the HTTPS server, but serve them in normal HTTP.

I hope this answers the question?

@asmedrano

Thanks for the reply!

@senko senko closed this Oct 12, 2012
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment