Wednesday, December 19, 2007

justbehide.com

Web proxy

In using a proxy server (for example, anonymizing HTTP proxy), all data sent to the service being used (for example, HTTP server in a website) must pass through the proxy server before being sent to the service, mostly in unencrypted form. It is therefore possible, and has been demonstrated for a malicious proxy server to record everything sent to the proxy: including unencrypted logins and passwords.

0 comments: