Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

能否进行本地到远端代理通讯加密? #2

Open
qianmengnet opened this issue May 20, 2022 · 1 comment
Open

能否进行本地到远端代理通讯加密? #2

qianmengnet opened this issue May 20, 2022 · 1 comment

Comments

@qianmengnet
Copy link

qianmengnet commented May 20, 2022

很不错的东西

@wengchaoxi
Copy link
Owner

wengchaoxi commented May 27, 2022

没必要。

这是 HTTP 代理,它的工作原理如下:
浏览器 <==> 代理服务 <==> 目标服务
现在大多网站都已支持 HTTPS 了,可以了解一下 SSL/TLS。通过 HTTPS 访问时,代理服务所代理的请求数据是加密了的,且只要证书安全,是不能被中间人攻击的。不过由于 HTTPS 的代理流程是使用 HTTP 通过代理服务向目标服务发送 CONNECT 请求而后建立 TCP 连接并传输加密的数据,本地到代理的途中仍然可以抓包到目标域名。

如果是想实现科学上网的话,应该使用 SOCKET 代理并对流量进行加密。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants