News for hackers. Stuff that matters.
Re:Mitmproxy 7.0 by monai on Friday July 16, 2021 @10:01AM (#27856292)
mitmproxy is a great tool, but it lacks upstream certificate lookup and attributes transfer to a generated host certificate. For example, Charles does that. Some applications perform attribute inspection to detect MITM proxies, namely Spotify. Are you planning to implement this feature? Or maybe you already did it in version 7?
Re:Mitmproxy 7.0 by mhils on Friday July 16, 2021 @10:17AM (#27856436)
mitmproxy does lookup the upstream certificate by default, but at the moment we only transfer common name, subject alternative names and (new) organization name. The good news is that with version 7 it's very easy to add more here, I'd be more than happy to accept contributions. :)
Re:Mitmproxy 7.0 by monai on Friday July 16, 2021 @10:38AM (#27856677)
Good news indeed! I tried to contribute 1–2 years ago and quickly realized that such a feature would require a substantial rewrite after a quick code inspection.
Re:Mitmproxy 7.0 by mhils on Friday July 16, 2021 @10:46AM (#27856762)
If you (or anyone else reading this) is interested, please do reach out on GitHub or our dev Slack. Happy to help you get started. :)
Re:Mitmproxy 7.0 by prinzhorn on Friday July 16, 2021 @03:59PM (#27860564)
Re:Mitmproxy 7.0 by mhils on Friday July 16, 2021 @04:21PM (#27860794)
Yes, exactly!