Proxy HTTPS to HTTP

Poet129 · April 5, 2020

Just now, WereCatf said:

Yes, you can run Squid under Linux.

Okay so do I need a cert for every website or just one?

WereCatf · April 5, 2020

1 minute ago, Poet129 said:

Okay so do I need a cert for every website or just one?

Presumably only one. That said, I don't use Squid so I can't help you more than that. You should google on how to use Squid for HTTPS/SSL-caching or read the link I gave and just give it a try.

Alex Atkin UK · April 5, 2020

Its generally a bad idea though, as with this setup you can't tell if you're actually talking to the real site or a spoofed one without checking what Squid is doing.

beersykins · April 5, 2020

Why do you want to do this?

A lot of people try to do this to capture credentials, fool users and similar, which is why you have things like HSTS.

If you have a legitimate use to inspect your own or company traffic it's easy to roll a proxy like Squid or a more security oriented one like Forcepoint in a professional environment.