0

As far as I know, and please correct me if I'm wrong, I can connect to an https site (assuming the whole page is https) while using a free proxy server I find on the web (and entered into Firefox's proxy settings), completely securely. The only thing the proxy will know is the domain I'm connecting to. Nothing else. It won't know the passwords I'm typing, nor even the exact page or query string following the domain.

Is there ANYTHING that I need to do to ensure that is the case, or is that automatic by the nature of https?

marked as duplicate by Steffen Ullrich tls May 12 '17 at 7:17

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

0

Some thoughts...

  1. Make sure that the site you got is the site you requested. (and hope the characters in the url are the same, not just look the same.)
  2. Keep an eye out for the site reverting to http at some point, leaking information.

These are just some ideas to help those who are not security oriented. I'm still interested in an expert's answer, of course.

Not the answer you're looking for? Browse other questions tagged or ask your own question.