I'm writing an experimental authentication protocol and need to see the unencrypted URI's of the HTTP Call, but want to provably show that I can't see the data.
Does any standard, or feature exist that allows me to receive a HTTPSCall where I can only see
- My authentication string
- The URI being accessed
- (nothing else, especially not the data)
From a REST-full perspective, this feels like a security guard who can inspect the doors but not see what's inside.
Does any tunneling, or cleartext "shared-variable" exist that allows me to see those properties (like Wireshark, but I have a TCP socket).