corkscrew is quite good for tunning SSH through an HTTP proxy. However, it only supports basic authentication. Have other people developed similar software supporting other types of authentications? The search engine didn't give me many useful results and I'm wondering whether there are any security implications here (for not implementing such tools).
So, the auth method used by corkscrew is only meant to auth you against your proxy. Not to auth you against the service you want to tunnel.
Have other people developed similar software supporting other types of authentications?
I'll make a list of the other types of HTTP authentications:
- digest auth
I've not met an digest-authing HTTP proxy myself, but I'm sure they exist somewhere, somehow. Anyway, it seems to me, you're the first person to actually need this – so, go and add that feature to the full 291 lines of C code that corkscrew 2.0 has. Shouldn't be that hard :)
Personally, I don't understand why anyone would mandate a HTTP proxy but then allow HTTP
CONNECT that allows things that aren't HTTPS. That's really like putting a lock on a door, but at the second time, installing an equally-sized second door next to the first door, unlocked.