wheever / ProxHTTPSProxyMII

A Proxomitron SSL Helper Program, can also be used to make a HTTP proxy like Privoxy capable of filtering HTTPS.
MIT License
43 stars 11 forks source link

Certificate revocation check #13

Open dxgldotorg opened 4 years ago

dxgldotorg commented 4 years ago

I used the Heinoganda build of ProxHTTPSProxyMII 1.5, and tested at https://revoked.badssl.com/ however the proxy loaded the site without any errors. When the proxy is disabled the web browser displays a warning message and blocks the site.

Please consider adding revocation checks to reduce the security impact of this proxy.