Collected research
Pretty-Bad-Proxy: An Overlooked Adversary in Browsers' HTTPS Deployments
Pretty-Bad-Proxy is a malicious proxy that breaks the end-to-end guarantees of HTTPS without breaking any cryptography, by targeting the browser rendering layers above HTTP. The vulnerabilities let an attacker who can sniff traffic steal data from an HTTPS server, forge HTTPS pages and impersonate authenticated users; all major browsers were affected.
Record
- Researcher
- Shuo Chen, Ziqing Mao, Yi-Min Wang and Ming Zhang
- Published by
- Microsoft Research
- Topic
- HTTP
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Shuo Chen, Ziqing Mao, Yi-Min Wang and Ming Zhang, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .