How 'private' are https proxies

P

phatzilla

Supreme Member
Joined
Apr 9, 2009
Messages
1,428
Reaction score
1,086
Say you buy some proxies and are browsing https sites (or using HTTPS webrequests), just how much information can the proxy provider possibly gather from your usage? I assume the contents of the requests will not be visible, however the hostname and perhaps directory path can be seen?

Can anyone shed some light on this?
 
Advertise on BHW
Everything is encrypted, including headers and directory path. One can only tell where the request is going without decrypting the request.

The hostname is not visible, but the IP address is and it's pretty easy to figure out to whom that IP belongs.
 
The relationship between you and the provider is based on trust so the provider could do anything.

You are right about the hostname/SNI it's visible during a TLS connection https://en.wikipedia.org/wiki/Server_Name_Indication

The connection is encrypted and all message contents however if you trust the provider it should see the content of the message unless you hash like HMAC https://en.wikipedia.org/wiki/HMAC

phatzilla said:
Say you buy some proxies and are browsing https sites (or using HTTPS webrequests), just how much information can the proxy provider possibly gather from your usage? I assume the contents of the requests will not be visible, however the hostname and perhaps directory path can be seen?

Can anyone shed some light on this?
Click to expand...
 
Besides, it's no secret that IPv6 proxies provide more security and anonymity than IPv4, but not everything works with them
 
Thank you, I already found this on Google, probably a good service the information is clear however I don't understand the proxy part but that is another discussion.
proxygo said:
maybe this will help explain
http://support.blazingseollc.com/support/solutions/articles/19000094183-what-are-ipv6-proxies-
Click to expand...
 
Using proxies this is the data that can be seen by ISP and proxy provider:

ISP - The DNS requests for all visited domains

Proxy Provider - The domains you visit, but not the extended link or the resources accessed (for example they can see only domain.com/23dqwsd12312ed12d12e142342 - where the extended link is encrypted by the HTTPS protocol).

You should also consider that proxy providers can log your traffic. So, if you want to keep your traffic as private as possible, it's best to go for a VPN rather than a proxy server.
 
Chris.Roark said:
Using proxies this is the data that can be seen by ISP and proxy provider:

ISP - The DNS requests for all visited domains

Proxy Provider - The domains you visit, but not the extended link or the resources accessed (for example they can see only domain.com/23dqwsd12312ed12d12e142342 - where the extended link is encrypted by the HTTPS protocol).

You should also consider that proxy providers can log your traffic. So, if you want to keep your traffic as private as possible, it's best to go for a VPN rather than a proxy server.
Click to expand...

Well then it appears they can only log the hostnames, not the data contained therein.

What if you run the DNS through a proxy, would the ISP see it then?

How about SSH tunnels
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top