News for hackers. Stuff that matters.

A comment on Request bodies in GET requests. Parent comment

Re:Request bodies in GET requests by toyg on Monday January 31, 2022 @05:25PM (#30155543)
The problem with "exotic" verbs is that proxies in the middle will often misbehave when faced with them. There is some old network infrastructure out there.
[ Parent | on HN ]
Re:Request bodies in GET requests by wizzwizz4 on Monday January 31, 2022 @05:32PM (#30155655)
With HTTPS, that doesn't matter.
[ Parent | on HN ]
Re:Request bodies in GET requests by jrockway on Monday January 31, 2022 @05:36PM (#30155699)
The proxies in question strip HTTPS, and re-encrypt with a certificate your IT department installed on your device.
[ Parent | on HN ]
Re:Request bodies in GET requests by wizzwizz4 on Monday January 31, 2022 @05:58PM (#30155986)
Those break everything anyway. Nobody should be obliged to support that.

… Now, back to reality. :-(

[ Parent | on HN ]
Re:Request bodies in GET requests by jjav on Tuesday February 01, 2022 @04:04AM (#30160200)
Reality is that approximately every company has these deployed. Not good, but reality.
[ Parent | on HN ]
Re:Request bodies in GET requests by Thiez on Tuesday February 01, 2022 @03:44PM (#30168992)
Not where I'm from. Is this an American thing?
[ Parent | on HN ]
Re:Request bodies in GET requests by wizzwizz4 on Tuesday February 01, 2022 @06:32PM (#30171282)
It's being imported into schools in the UK and parts of mainland Europe. Cory Doctorow reckons that there's a trend, where things like this start in places like schools and then gradually end up in all our institutions.
[ Parent | on HN ]
Re:Request bodies in GET requests by mh- on Monday January 31, 2022 @05:34PM (#30155676)
not really. there are plenty of middleboxes deployed by IT departments that happily mess with HTTPS traffic, too.
[ Parent | on HN ]
Re:Request bodies in GET requests by tedunangst on Monday January 31, 2022 @05:34PM (#30155678)
There are intercepting https proxies.
[ Parent | on HN ]