Secure browser-to-proxy communication
When connecting to a possibly hostile network I want to tunnel
all traffic from my browser to some proxy I have set up on the Internet.
The obvious way to do this is with a proxy. The problem with that is
that the traffic from the browser to the proxy is not encrypted. Even
when you browse to secure SSL sites some traffic is being sent in the
clear, such as the host name. That's not so bad, but I want to hide my
HTTP traffic too.
Turns out that at least
Chrome
does support using SSL between the browser and the proxy ,
but you can't configure it directly. You have to use Proxy Auto Configuration
to point to an HTTPS host:port.
Running OpenVPN is out in this case since I want it to work with everything, including Android
and ChromeOS… and Windows (without installing "stuff"). Not that I've tried it with Windows yet,
but it should work.
For added fun I wanted to authenticate to the proxy us...