Proxy.app Lands In App Store

Re:Proxy.app Lands In App Store by onethumb on Wednesday May 21, 2014 @03:15PM (#7780149)

Bought it, installed it, launched it. Then nothing happened. The iconography isn't clear (I have no idea what the first mode, the broken triangle icon, does) and has no tooltips on hover. It never prompted me for an Admin password, which probably explains why it's not actually capturing anything, since it probably can't automatically change the Mac OS X proxy settings on my network connections, unlike Charles.

[ Parent | on HN ]

Re:Proxy.app Lands In App Store by onethumb on Wednesday May 21, 2014 @03:23PM (#7780192)

Ok, sure enough, if I manually go into my Network settings and add the HTTP proxy, stuff starts to collect. Nice. Wish it were automatic. Wonder how anyone will find this to do it when there's no docs?

But still can't get it to proxy HTTPS. The MitM certificate provided seems to be invalid: https://dl.dropboxusercontent.com/s/0z8khpq5p4guf9f/2014-05-... && https://dl.dropboxusercontent.com/s/6efwllajcnbpjvs/2014-05-...

I really want this tool to work, since I agree there's a big need, but frustrating so far...

[ Parent | on HN ]

Re:Proxy.app Lands In App Store by mw6621 on Wednesday May 21, 2014 @03:43PM (#7780317)

I just bought it as well and was also trying to get HTTPS proxying to work. I am not a security guy, so I could be incorrect, but I think there are two things going on here:

1) the certificate generated by Proxy is 512 bits which OS X doesn't support; and

2) i'm not sure that Proxy will work with sites that use HSTS -- you might be able to clear the HSTS database in Chrome, but still for sites like Google, I think the certificate information is hard-coded.

[ Parent | on HN ]

Re:Proxy.app Lands In App Store by passfree on Wednesday May 21, 2014 @05:15PM (#7780832)

Hi, on point 1 you are correct. We have overlooked this and we feel stupid because of this. However, the good news is that this is already fixed. We are awaiting for Apple's approval.

On point two - unfortunately this is how Chrome works. However, you can control HSTS via chrome://net-internals/#hsts. Unfortunately, this will not work for preloaded entries.

We will be issuing guides soon.

[ Parent | on HN ]