Skip to main content
Information Security

Return to Question

fix minor typos
Source Link
edit approved Oct 1, 2018 at 15:57
tgogos
edit approved Oct 1, 2018 at 15:57
tgogos
  • 193
  • 1
  • 1
  • 8

Many companycompanies use a network proxy in order to intercept web-based trafictraffic for example.

I have some questions about their functioning:

  1. I've never seen SSL warning in company. I doubt that they install trusted certificates from their proxy into the OS (because browsers may use different certificates store, Firefox has it's own for example). So how does they intercept trafictraffic without browser warning?

  2. Supposing that they install the proxy certificate into each host. If a host wants to go to "https://google.com", the hostname into the certificate will be that of the proxy , not google. So in any case, a SSL warning should appear. Does they generate certificates (with google hostname for example) signed by the trusted certificate proxy ?

Many company use a network proxy in order to intercept web-based trafic for example.

I have some questions about their functioning:

  1. I've never seen SSL warning in company. I doubt that they install trusted certificates from their proxy into the OS (because browsers may use different certificates store, Firefox has it's own for example). So how does they intercept trafic without browser warning?

  2. Supposing that they install the proxy certificate into each host. If a host wants to go to "https://google.com", the hostname into the certificate will be that of the proxy , not google. So in any case, a SSL warning should appear. Does they generate certificates (with google hostname for example) signed by the trusted certificate proxy ?

Many companies use a network proxy in order to intercept web-based traffic for example.

I have some questions about their functioning:

  1. I've never seen SSL warning in company. I doubt that they install trusted certificates from their proxy into the OS (because browsers may use different certificates store, Firefox has it's own for example). So how does they intercept traffic without browser warning?

  2. Supposing that they install the proxy certificate into each host. If a host wants to go to "https://google.com", the hostname into the certificate will be that of the proxy , not google. So in any case, a SSL warning should appear. Does they generate certificates (with google hostname for example) signed by the trusted certificate proxy ?

Tweeted twitter.com/StackSecurity/status/764547919974428672
Source Link
Duke Nukem
Duke Nukem
  • 737
  • 3
  • 11
  • 22

How does SSL Proxy server in company work?

Many company use a network proxy in order to intercept web-based trafic for example.

I have some questions about their functioning:

  1. I've never seen SSL warning in company. I doubt that they install trusted certificates from their proxy into the OS (because browsers may use different certificates store, Firefox has it's own for example). So how does they intercept trafic without browser warning?

  2. Supposing that they install the proxy certificate into each host. If a host wants to go to "https://google.com", the hostname into the certificate will be that of the proxy , not google. So in any case, a SSL warning should appear. Does they generate certificates (with google hostname for example) signed by the trusted certificate proxy ?