search

barnacs / compy

HTTP/HTTPS compression proxy
ISC License
204 stars 34 forks source link

Some sites give certificate error when using mitm #44

Closed ghost closed 5 years ago

ghost commented 6 years ago

Most of https sites work ok, but some of them fail with invalid certificate error. Here's an example list: https://vk.com https://youtube.com/ https://support.google.com/chrome/answer/6098869

ggramaize commented 5 years ago

Considering the issue and the examples, it sounds like Https public Key Pinning (HPKP) just bit you. On Firefox, the default behaviour is silently accept MITM if you installed your proxy's CA certificate by hand into the trusted CA certificate store.

Not sure if it's necessary to keep that ticket open.