image ssl

[ProxRocks]

90+ percent of the time, when i encounter ssl "cert crap" warnings, they're due to an IMAGE trying to be brought in...

in the past, i've been simply able to bring the image in WITHOUT ssl - ie, bring it in as http // domain // image.gif INSTEAD OF httpS // domain // image.gif and also INSTEAD OF bringing it in as "half ssl" http // https-px-.domain // image.gif

it seems that web designers are catching on and no longer allow httpS // domain // image.gif to be accessed via http // domain // image.gif


sooo...

i'd like to try something different, anybody know of any SSL PROXIES that are "url-based" ???

i'd like to try to start bringing those ssl-only images in as http // proxy?url= httpS // domain // image.gif


any advice/assistance?

[JJoe]

I wonder...
assuming that you are using some Internet Explorer shell, does it have and have you disabled "Warn about certificate address mismatch"?
In IE it is under "Internet Options" >> "Advanced".

(Apr. 18, 2014 01:58 PM)ProxRocks Wrote:  in the past, i've been simply able to bring the image in WITHOUT ssl - ie, bring it in as http // domain // image.gif INSTEAD OF httpS // domain // image.gif and also INSTEAD OF bringing it in as "half ssl" http // https-px-.domain // image.gif

it seems that web designers are catching on and no longer allow httpS // domain // image.gif to be accessed via http // domain // image.gif

Assuming, you have been using the Proxomitron to change the html to point to http...

(Apr. 18, 2014 01:58 PM)ProxRocks Wrote:  i'd like to try something different, anybody know of any SSL PROXIES that are "url-based" ???

i'd like to try to start bringing those ssl-only images in as http // proxy?url= httpS // domain // image.gif

There have been public cgi proxies that used this format. Now, I find that the final destination is usually obfuscated so rewritting the links could be difficult and attempts to traverse http to https are often rejected.

google.com/search?q=public+cgi+proxy+https
rosinstrument.com/cgi-proxy.htm
webefree.nl/ (a random example)

Then there might be the need for proper referers and cookies.

If you are willing to give up filtering of images:
If the host is unique to the images, you can try bypassing the image host, via the Proxomitron or a PAC file.
If the url's path must be inspected, I don't think it is supported in IE6+ PAC routine and a Proxomitron header filter should cause a browser warning (default settings).

Hmm, I have never tried prefacing the image's host in the page's html, catching the request, $RDIR to the correct url, and then disabling filtering with $FILTER(False).

https://itsajpg.ssl.gstatic.com >> $RDIR(https://ssl.gstatic.com) $FILTER(False)

HTH

[ProxRocks]

(Apr. 19, 2014 04:23 AM)JJoe Wrote:  does it have and have you disabled "Warn about certificate address mismatch"?

yes, doesn't "do" anything IF chained to Proxo, with or without the "1.1 through proxy" setting...

it hasn't since IE7 / XP SP2