Meldium (YC W13) Controls Your Team’s Shared App Passwords For You

Re:Meldium (YC W13) Controls Your Team’s Shared App Password... by soumyadeb on Monday February 25, 2013 @07:15PM (#5282878)

This can be done using SSL proxying. You can run a proxy server and send the HTTP login POST request (with a fake password) through the proxy server. The proxy server can in turn replace the fake password with the actual password and forward the POST request to the end website.

It is also possible to run the proxy server on the end user machine and use a mechanism called SSL tunneling to securely replace the password. Its hard to explain it here but it can be done. The benefit of running the proxy on the end user machine is that you don't have to route your traffic through a remote proxy.

I have a system which has this thing working - will open-source it under github soon.

[ Parent | on HN ]

Re:Meldium (YC W13) Controls Your Team’s Shared App Password... by stanleydrew on Monday February 25, 2013 @09:05PM (#5283409)

I doubt it's a local proxy since it's a Chrome/FF extension. Or maybe I've not kept up with the state of Chrome/FF extension development and it is completely possible to write a proxy that runs within the browser.

[ Parent | on HN ]

Re:Meldium (YC W13) Controls Your Team’s Shared App Password... by Hello71 on Monday February 25, 2013 @09:41PM (#5283565)

Extensions don't proxy anything. They do, however, have access to everything you do (type, click, etc) and everything you can see. (i.e. close enough)

[ Parent | on HN ]