Perfect Forward Secrecy

[JJoe]

(Oct. 19, 2013 04:31 PM)neverwasinparis Wrote:  do you have any idea which bridging proxy could be used when using half SSL?

I'm not quite sure. There are other proxies (from memory with probably current openssl: Webscarab, Paros, Fiddler, mitmproxy, Charles, BurpSuite, etc) that I dismissed for continuous Windows use long ago. I assume that once filtering these proxies would bridge.

I've been looking at http://honeyproxy.org/ , wondering if Proxo's soul could find a home in there.

Features:
Analyze HTTP(S) traffic on the fly
Filter and highlight traffic, regex support included.
Report Generation for saved flows, including a live JS editor.
Save HTTP conversations for later analysis
Make scripted changes with Python, e.g. remove Cache Header.
based on and compatible to mitmproxy.
cross-platform (Windows, OSX and Linux)
SSL interception certs generated on the fly

(Oct. 19, 2013 04:31 PM)neverwasinparis Wrote:  by the way, following that logic Proxomitron does not support other HTTPS features too. so it should be a good idea to let the certification process done by a program that is up to date, not just because of Perfect Forward Secrecy.

This lack of other HTTPS features doesn't worry me too much. Those who filter HTTPS should be looking out for themselves.
Missing features that keep the Proxomitron from filtering and the dated HTTPS identifying us is worrying.