protocol is http or https?

3 posts, 0 answers
  1. andy
    andy avatar
    1 posts
    Member since:
    Mar 2015

    Posted 11 Mar 2015 Link to this post

    Hello,
    I was was capturing some traffic from a users environment and see some info which is unclear
    under host: "tunnel to" and then under url: xxxx.com:443 
    someone told me that means an https connection
    but the protocol shows http not https
    would this indicate the user's connection is via a corporate proxy or that type of connection or is the connection indeed https - if so why would fiddler show http and not https?
    Thanks,
    Andy
     
  2. Cody
    Admin
    Cody avatar
    3360 posts

    Posted 11 Mar 2015 Link to this post

    Hello Andy,

    You have posted your question in the Telerik Test Studio support forum. Your question sounds like it should be directed to the Fiddler support team. If you confirm this I will redirect your question to that team.

    Regards,
    Cody
    Telerik
     
    The New Release of Telerik Test Studio Is Here! Download, install,
    and send us your feedback!
  3. Eric Lawrence
    Admin
    Eric Lawrence avatar
    833 posts

    Posted 17 Mar 2015 Link to this post

    Hello, Andy--

    When a client (e.g. a browser) sends a HTTPS request through a proxy (like Fiddler) it first requests that the proxy establish a bidirectional "tunnel" to the target server. It does so by issuing a HTTP request that uses the CONNECT method. If the proxy complies and returns a 200 OK response, the client then uses that HTTP Tunnel to send one or more (encrypted) HTTPS requests to the target server.

    The "tunnel" is needed because otherwise the proxy wouldn't know where to send the traffic (because the target destination information is encrypted!) 

    Fiddler will only show the HTTPS requests inside the tunnel if you've enabled decryption inside Tools > Fiddler Options > HTTPS. 

    Regards,
    Eric Lawrence
    Telerik
     

    Check out the Telerik Platform - the only platform that combines a rich set of UI tools with powerful cloud services to develop web, hybrid and native mobile apps.

     
Back to Top