简评使用http代理服务器的安全性简评（On the safety of HTTP proxy server）
使用http代理服务器的安全性简评On the safety of HTTP proxyserver
Due to various reasons, in the domestic Internet, it isunavoidable to deal with HTTP proxy server. HTTP proxy serveris divided into encrypted proxy server and general proxy server.If we run some software on your computer can access before cannot access the site, then it may be encrypted proxy; if we setthe proxy server in the browser, without running any software,so this type of proxy server is the general agent. In general,encryption agent security is better than ordinary proxy ifthere is no problem with encryption agent software. Here, thisarticle is mainly about the security of ordinary agents.Brief introduction of 1 and HTTP proxy agreement
The communication between the browser and the HTTP proxy serveris through the HTTP proxy protocol. If we do not use theencrypted proxy running on your computer, but directly in thebrowser settings on the internet proxy server address, thensend between the browser and proxy server communication to theInternet will. The common requests of proxy server are GET, POSTand CONNECT, and the following are introduced respectively:
1. 1, GE T
If we access aweb page of a HTTP protocol through a proxy server,then the browser sends the GET request to the HTTP proxy server.For example, when we access http://www.microsoft.com/ througha proxy server, the browser sends data to the HTTP proxy server:
. . . . . .
After the proxy server gets the data, the web page is returnedto the browser:
HTTP/1. 1 200 OK
. . . . . .
<html>
. . . . . .
We did not use and comparison of the proxy server, if not usinga proxy server, then we visit http://www.microsoft.com/, thebrowser will send a request to the server underwww.microsoft.com:
GET / HTTP/1. 1
. . . . . .
Server return:
HTTP/1. 1 200 OK
. . . . . .
<html>
. . . . . .
We see that after using the proxy server, the format of the GETrequest and return is almost unchanged, and there is nodifference in the security of using the proxy server.
1.2, POST
When we submit the form in the use of the HTTP protocol on thesite (such as the website user login form, fill in the user nameand password, and then log in, the form is submitted to theserver) , if the form type is POST (most of the type of form isPOST, but the search engine search form seemed to be GET type) ,then the browser will send a POST request to the proxy server.Comments such as inhttp://www.williamlong. info/archives/2209.html, the datawill be submitted to the http://www.williamlong. info/cmd.asp?Act=cmt&key=a666b083, if we use the HTTP proxy server, therequest will be sent to the proxy server:
POST http://www.williamlong. info/cmd.asp?
Act=cmt&key=a666b083 HTTP/1. 1
. . . . . .
[submission of comment data]
If the proxy server is not used, the following POST requestsare sent directly to the www.williamlong. info server:
POST /cmd.asp? Act=cmt&key=a666b083 HTTP/1. 1
. . . . . .
[submission of comment data]
The results returned using proxy server and without proxyserver are basically the same. So POST requests are basicallyno different in terms of the security of using proxy servers.
1.3, CONNECT
When we visit the HTTPS protocol web site, the browser sendsthe CONNECT request to the proxy server. For example, we visithttps://mail.google.
When com/mail/? Shva=1#inbox, the browser sends the followingrequest to the proxy server:
CONNECT mail.google.com:443 HTTP/1.0
. . . . . .
Then the server returns:
HTTP/1. 1 200 Connection established
. . . . . .
Then the browser starts sending encrypted data to the proxyserver, using the mail.google. com SSL certificate. The proxy
server to encrypt data as mail.google. com returns back to thebrowser.
If you don't use a proxy server, the browser connects directlyto the mail.google. com:443, and then starts sending andreceiving encrypted data.
We see that the use of the HTTP proxy server, HTTPS protocolcontent still end-to-end encryption, HTTPS still maintains thetransmission of any content will not be responsible for datatransmission equipment (including proxy server) to see thecharacteristics. Whether the proxy server is used does notchange the security of the HTTPS protocol.
2. Discuss in depth
Q: we see, after using the proxy server will need to access thedomain name of the website (including HTTPS) sent to the proxyserver, so that if the network being monitored, you will knowwhat sites we visit (but not HTTPS protocol to monitor thecontents of the transmission, only know that we visited thewebsite) , this is reduce security?
A: if our network is monitored, all network data packets arerecorded, so if you don't use a proxy server, the browser willfirst send a query to the corresponding domain name IP DNSrequest, IP will also be sent after the TCP connection requestto the need to visit the site, they can knowwhat sites we visitby network packet monitor.
Q: some proxy server products claim to be able to record the
contents of HTTPS transmission. How do they do that?
A: using the SSL hijacking means. These proxy server products,without exception, need to install the corresponding client,once you install these clients, you can control the clientcomputer, and then install the proxy server' s own certificate,SSL hijacking. Some products do not need to install the client,but the client browser access all the HTTPS web site, but thebrowser SSL certificate validation, the browser will give thecertificate invalid warning.
Q: if we were not able to access a website, use a proxy servercan be put on the website, this website is the HTTP protocol,so that access to this site all actions are logged in themonitored network environment?
A: yes. Because the proxy server does not change the securityof the HTTP protocol, all the contents of the plaintexttransmission can be recorded by the monitoring system. So, weuse a proxy server to submit important information (such as username and password) , you must select the HTTPS protocol, enterthe user name and password in the need to pay attention to thebrowser' s address bar is not to begin with https.
Q: after using aproxy server, theway the network packet passesis not different from that of the proxy server. What' s theimpact on the security?
A: it depends on every node in the road that was used beforeand after the proxy server was used. Even if you do not use aproxy server, the Internet still face a variety of human network
fault, using a proxy server because of the path is different,so there may still need to face these artificial networkfailures, there may be no need to face these people a networkfailure (if the proxy server itself specifically addressesthese failures) .
3, s umm ary
The above, using a remote HTTP proxy server security and do notuse a proxy server basic does not have what difference, thehuman network problems we face in using a proxy server theremay still exist, but also may reduce or even disappear.If someone offers artificial network failure to resolve theproxy server in the country, not to use or inability to useencryption software agents used, combined with the "proxyserver" and how to use AutoProxy, the agent of the era mightcome oh.
- 简评使用http代理服务器的安全性简评（On the safety of HTTP proxy server）相关文档
- 服务器配置Apache Http Server做为WebLogic集群的代理服务器
- 代理服务器在IE等浏览器中使用HTTP代理服务器
- 地址搭建http代理服务器
- 代理服务器python实现http代理服务器
- 江苏省教育网代理服务器-http代理-游戏代理服务器
- 征地http
HostYun（22元/月）全场88折优惠香港原生IP大带宽
在之前的一些文章中有提到HostYun商家的信息，这个商家源头是比较老的，这两年有更换新的品牌域名。在陆续的有新增机房，价格上还是走的低价格路线，所以平时的折扣力度已经是比较低的。在前面我也有介绍到提供九折优惠，这个品牌商家就是走的低价量大为主。中秋节即将到，商家也有推出稍微更低的88折。全场88折优惠码：moon88这里，整理部分HostYun商家的套餐。所有的价格目前都是原价，我们需要用折扣码...
咖啡主机22元/月起,美国洛杉矶弹性轻量云主机仅13元/月起,高防云20G防御仅18元/月
咖啡主机怎么样?咖啡主机是一家国人主机销售商，成立于2016年8月，之前云服务器网已经多次分享过他家的云服务器产品了，商家主要销售香港、洛杉矶等地的VPS产品，Cera机房 三网直连去程 回程CUVIP优化 本产品并非原生地区本土IP，线路方面都有CN2直连国内，机器比较稳定。咖啡主机目前推出美国洛杉矶弹性轻量云主机仅13元/月起,高防云20G防御仅18元/月;香港弹性云服务器，香港HKBN CN...
无忧云：洛阳/大连BGP云服务器38.4元/月,雅安物理机服务器315元/月起,香港荃湾CN2限时5折优惠
无忧云怎么样?无忧云是一家成立于2017年的老牌商家旗下的服务器销售品牌，现由深圳市云上无忧网络科技有限公司运营，是正规持证IDC/ISP/IRCS商家，主要销售国内、中国香港、国外服务器产品，线路有腾讯云国外线路、自营香港CN2线路等，都是中国大陆直连线路，非常适合免备案建站业务需求和各种负载较高的项目，同时国内服务器也有多个BGP以及高防节点，目前商家开启了夏日清凉补贴活动，商家的机器还是非常...
-
行业关键词为什么有些行业关键词竟价出价很低有些行业很高安装程序配置服务器失败安装用友T3出现安装程序配置服务器失败是怎么回事博客外链怎么用博客发外链？51自学网站有哪些免费自学网真正免费的网络电话谁知道哪个真正免费的网络电话啊?告诉我把3?太感谢了快速美白好方法快速美白方法9flash怎么使用ePSXe啊?网易公开课怎么下载怎么下载网易公开课里的视频 .......雅虎天盾有没有用用雅虎天盾的啊？奇虎论坛奇虎是中国的吗？