MITM

Question

MITM

vbisbest opened this issue 3 years ago · comments

Ray Kelly commented 3 years ago

Is it correct that this does not support MITM as the original goproxy does?

Aofei Sheng · Answer 1 · Tue Apr 20 2021 21:44:23 GMT+0800 (China Standard Time)

Since Go has checksum database, there is no way for a Go module proxy to perform MITM attacks.

Ray Kelly · Answer 2 · Tue Apr 20 2021 21:51:52 GMT+0800 (China Standard Time)

Thank you for the quick response. Not sure I follow your response though. Intercepting SSL in the proxy has nothing to do with go's checksum database. Looking for something like this functionality https://github.com/elazarl/goproxy/tree/master/examples/goproxy-transparent.

Aofei Sheng · Answer 3 · Tue Apr 20 2021 21:55:36 GMT+0800 (China Standard Time)

Ah, sorry, I think you found the wrong project, this project is for the Go programming language, not for the traditional system-wide proxying. Closing.