search

SuppSandroB / sandrop

Automatically exported from code.google.com/p/sandrop
225 stars 63 forks source link

HTTP digest authentication #121

Open mrkschan opened 8 years ago

mrkschan commented 8 years ago

I have setup a squid3 on ubuntu14.04 and tried using Drony to connect to it. Drony keeps prompting username and password while squid3 access log keeps show HTTP407 responses. Would that be my configuration problem or what?

Using manual setup, plain http proxy, set username, password, realm on Drony.

SuppSandroB commented 8 years ago

Try first to setup with username/password so squid3 will work okey. Then test with digest. Must say that digest is not very used auth any more. If you need better security try to use username/password over https. https://blog.habets.se/2014/09/Secure-browser-to-proxy-communication---again

mrkschan commented 8 years ago

Thanks for the security reminder :smile:.

I think my htdigest setup on squid3 is working since I can use it on many other machines and I can use it with SandroProxy. I just wonder if I can switch from SandroProxy to Drony since Drony vpn model is so convenient!

rgcosma commented 6 years ago

Hi - I'd like to add a vote for this as digest still has its role: it's safe enough for auth and avoids multiple layers of encapsulation, everything being HTTPS anyway. FYI ProxyDroid works with digest and is open source, but requires root so not an option where Drony works