A basic/newbie question on https.

Hello,

Let's say, I can securely log into https://<URL> site using username
'u1' and password 'p1' from within a browser.

1. Is it possible to write a proxy
* that runs on my client machine,
* that the browser on the same client machine points to,
* that intercepts another username/password pair -- u2/p2 --
entered on the login page of the site and transforms it to u1/p1 so
that the user authentication can happen ?

Basically, what I'm trying to accomplish is temporarily allow a user
to log into https://<URL> without actually divulging the real username/
password (u1/p1). (I would validate u2/p2 within the above proxy so
that only the users I allow can access the site.)

This proxy could either be a stand-alone program, or a browser plugin.
I know https is a secure protocol; what I don't know is the point at
which the encryption occurs and whether or not this point is late
enough to allow interception from the browsing machine... whether a
browser would allow hooks / interception API without compromising the
motivations/goals of the https protocol.

2. Also, any recommendations for a 'good' open-source http proxy?
Muffin seems to be very old project. Proxomitron is superb but is not
opensource!

Many thanks in advance,
/HS
.

Relevant Pages

  • Re: A basic/newbie question on https.
    ... 'u1' and password 'p1' from within a browser. ... that the browser on the same client machine points to, ... Paros Proxy can do this. ... I know https is a secure protocol; what I don't know is the point at ...
    (comp.security.misc)
  • Re: https proxy
    ... >>being sent to the https server. ... >>encrypted from the browser due to the https connection, ... browser by running a proxy on a different machine that accepts an HTTPS ...
    (comp.lang.python)
  • Re: access only to one external site
    ... Is the firewall client installed on the client? ... Is the browser configured to use a proxy or not? ... If you can send a zipped print screen of the Destination Set definition it ...
    (microsoft.public.isa.configuration)
  • Re: Using Google to read RMMGA
    ... > laptop where I just occasionally switches over to Windows ... > what gets through to your browser is the 'privoxy' junk filtering proxy ... > (http://www.privoxy.org is the web site I believe). ...
    (rec.music.makers.guitar.acoustic)
  • Re: Network connection
    ... >>> Is it time to read about proxies? ... >> servers on Wikipedia and reverted some vandalism there. ... >>>of proxy or port not allowed on the firewall. ... > sites that you weren't able to access with a browser? ...
    (uk.comp.os.linux)