ProxHTTPSProxy, a Proxomitron SSL Helper Program

[whenever]

(Jul. 13, 2010 10:38 PM)JJoe Wrote:  I think, it came before the complaints.

So it is not fixed yet in release 2.7 of Python.

If you upgrade your Python installation regularly and at some time ProxHTTPSProxy throw an Expection when you visit a site whose certificate doesn't accord with its host name, we can know that issue is fixed.

(Jul. 13, 2010 10:38 PM)JJoe Wrote:  As I thought but you might want to add a note about this to the first post.

done.

(Jul. 13, 2010 11:31 PM)ProxRocks Wrote:  when i go to a bank site, that "web content" might bounce around through eight or nine "non-local" servers, those "certificates", in my opinion, correct me if i'm mistaken, are to be "honored" by those "non-local" servers required to get that content to me...

The problem is if we don't verify the certificates, those contents might be sniffed/modified by a man-in-the-middle attack, just like what ProxHTTPSProxy does.