Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Inspired by this hot question: Is there any reason to block HTTPS?
Is there a way to setup an own server and encrypt all normal requests in the request body?
So for an outside person it would look like filling out a weird form with random data and getting random data back, but in reality it would be the same as the https traffic, or similarly encrypted?
Theoretically this should work, but does such a protocol exist? https over http?
You ask for tunneling a protocol (like HTTPS) through plain HTTP. And yes, there is at least httptunnel which does this. From the descrition:
HTTPTunnel is a tunneling software that can tunnel network connections through restrictive HTTP proxies over pure HTTP "GET" and "POST" requests.
But note that if you work in an environment where use of HTTPS is restricted for security or productivity reasons, using such a tool to bypass the block is usually a violation of the policy. And usage of the tool can be detected because it shows abnormal traffic patterns.
An encrypted VPN does exactly that.
