I am curious about security of proxy servers. I read a few threads and all of them were overly general or missed the point I am interested in, the devil is in the details.
The malicious agent has a proxy server and HTTPS traffic goes through it, e.g. a client making connection to an HTTPS protected website.
- What is the span of the HTTPS protection? Does it protect traffic between client and destination or is it only in between proxy and destination?
- Is it trivial for the malicious proxy to directly sniff critical data? With trivial I mean not using significant computational power. With critical data I mean things like secrets or passwords not metadata like IP addresses and so on.
- Do SOCKS and HTTP protocols make difference in the difficulty of such attack?
Other factors should not be assumed, or assume worst case scenario.