internetarchive / internetarchive/warcprox

Shows valid fake TLS certificate when the actual site has invalid certificates

Open
#112 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
467
Forks
66
PR merge metrics
No merged PRs in 30d

Description

When a site being proxied has an invalid cert (e.g. https://wrong.host.badssl.com/ or any of the others on https://badssl.com), warcproxy still shows the nice valid green "Warcproxy CA on " certificate.

It would be nice (and much safer) if it checked for revoked/invalid certificates and showed a proxied invalid certificate.

The reason I'm asking is because I'm setting up a general-purpose proxy to archive all my web browsing, and I feel kind of unsafe without _any_ protection against invalid certificates.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.