Hello,
I was was capturing some traffic from a users environment and see some info which is unclear
under host: "tunnel to" and then under url: xxxx.com:443
someone told me that means an https connection
but the protocol shows http not https
would this indicate the user's connection is via a corporate proxy or that type of connection or is the connection indeed https - if so why would fiddler show http and not https?
Thanks,
Andy
I was was capturing some traffic from a users environment and see some info which is unclear
under host: "tunnel to" and then under url: xxxx.com:443
someone told me that means an https connection
but the protocol shows http not https
would this indicate the user's connection is via a corporate proxy or that type of connection or is the connection indeed https - if so why would fiddler show http and not https?
Thanks,
Andy
2 Answers, 1 is accepted
0
Hello Andy,
You have posted your question in the Telerik Test Studio support forum. Your question sounds like it should be directed to the Fiddler support team. If you confirm this I will redirect your question to that team.
Regards,
Cody
Telerik
You have posted your question in the Telerik Test Studio support forum. Your question sounds like it should be directed to the Fiddler support team. If you confirm this I will redirect your question to that team.
Regards,
Cody
Telerik
0
Hello, Andy--
When a client (e.g. a browser) sends a HTTPS request through a proxy (like Fiddler) it first requests that the proxy establish a bidirectional "tunnel" to the target server. It does so by issuing a HTTP request that uses the CONNECT method. If the proxy complies and returns a 200 OK response, the client then uses that HTTP Tunnel to send one or more (encrypted) HTTPS requests to the target server.
The "tunnel" is needed because otherwise the proxy wouldn't know where to send the traffic (because the target destination information is encrypted!)
Fiddler will only show the HTTPS requests inside the tunnel if you've enabled decryption inside Tools > Fiddler Options > HTTPS.
Regards,
Eric Lawrence
Telerik
When a client (e.g. a browser) sends a HTTPS request through a proxy (like Fiddler) it first requests that the proxy establish a bidirectional "tunnel" to the target server. It does so by issuing a HTTP request that uses the CONNECT method. If the proxy complies and returns a 200 OK response, the client then uses that HTTP Tunnel to send one or more (encrypted) HTTPS requests to the target server.
The "tunnel" is needed because otherwise the proxy wouldn't know where to send the traffic (because the target destination information is encrypted!)
Fiddler will only show the HTTPS requests inside the tunnel if you've enabled decryption inside Tools > Fiddler Options > HTTPS.
Regards,
Eric Lawrence
Telerik
Check out the Telerik Platform - the only platform that combines a rich set of UI tools with powerful cloud services to develop web, hybrid and native mobile apps.