search

google / huproxy

Apache License 2.0
420 stars 76 forks source link

Feature request: Encryption of websocket traffic #13

Open Sebbb opened 2 years ago

Sebbb commented 2 years ago

Hello,

it would be nice if I could give both server and client a static passphrase, with which the websocket traffic then is encrypted.

I know, you can use websockets with TLS and also the SSH traffic is encrypted already, but still, if a company intercepts TLS traffic and inspects it, you would see that SSH traffic is encapsulated.

ThomasHabets commented 2 years ago

Seems reasonable. It does introduce the problem of selecting and implementing ciphers, though.

The easy choice is probably to go with ChaCha20, just like WireGuard. Though that still requires that I fully understand the implications of nonce.

x-077 commented 2 years ago

Hello @ThomasHabets ,

Great tools by the way, thanks :) .. Just wondering if you have any update on this topic :).

Thank you.

ThomasHabets commented 2 years ago

This is in a state of me being unlikely to implement it, but would accept well written pull requsets.