Get a Pentest and security assessment of your IT network.

Cyber Security

HTTPS Proxy with System Proxy: Does it Work?

TL;DR

Yes, a browser-based HTTPS proxy can add an extra layer of security even when you’re already using a system-level proxy. However, the effectiveness depends on how things are configured and what you’re trying to protect against. The browser proxy encrypts traffic between your computer and the proxy server; the system proxy handles traffic before it reaches the browser.

Understanding the Layers

Think of it like this:

  • System Proxy: Controls all network requests from applications on your computer. It’s a broad gatekeeper.
  • Browser Proxy: Controls only traffic originating from that specific browser. It’s more focused.

Using both means the data goes through two proxy servers, adding complexity but potentially increasing security.

Step-by-Step Guide

  1. Configure Your System Proxy: This is usually done in your operating system’s network settings. The exact steps vary depending on your OS (Windows, macOS, Linux). You’ll need the proxy server address and port.
    • Windows: Settings > Network & Internet > Proxy
    • macOS: System Preferences > Network > Advanced > Proxies
    • Linux: Often configured through environment variables or a GUI network manager.
  2. Configure Your Browser’s HTTPS Proxy: Most browsers (Chrome, Firefox, Edge) allow you to set a proxy server independently of the system settings.
    • Chrome/Edge: Settings > System > Open your computer’s proxy settings (this will take you to the OS proxy settings). You can also use extensions like Proxy SwitchyOmega for more control.
    • Firefox: Options > General > Network Settings > Settings…

    When configuring the browser proxy, ensure you select HTTPS as the protocol if available.

  3. Verify System Proxy is Working: Use a website like WhatIsMyIP before enabling the browser proxy. Note your IP address.
    curl https://api.ipify.org
  4. Verify Browser Proxy is Working: Enable the browser proxy and revisit WhatIsMyIP within that browser. The IP address should now be different (the proxy server’s IP).

    If it shows the same IP, double-check your browser’s proxy settings.

  5. Test with HTTPS Websites: Visit a secure website (e.g., Google). The browser should show a valid SSL/TLS certificate for the proxy server, not your original connection.

    Look for the padlock icon in the address bar.

What Does This Protect Against?

  • Local Network Snooping: The browser proxy encrypts traffic within your local network, protecting it from eavesdropping.
  • ISP Monitoring (to some extent): Your ISP will see a connection to the HTTPS proxy server, but not the specific websites you visit if the proxy is well-configured and uses end-to-end encryption.

Limitations & Considerations

  • System Proxy Still Sees Traffic: The system proxy still handles initial connections. If it’s compromised, your data could be intercepted before reaching the browser.
  • Proxy Server Trust: You are trusting the HTTPS proxy server operator. Choose a reputable provider.
  • Performance Impact: Using two proxies can slow down browsing speed.
  • DNS Leaks: Ensure your DNS requests are also routed through the proxy to prevent leaks of your browsing history. Configure DNS settings within the browser or use a proxy server that handles DNS resolution.
Related posts
Cyber Security

Zip Codes & PII: Are They Personal Data?

Cyber Security

Zero-Day Vulnerabilities: User Defence Guide

Cyber Security

Zero Knowledge Voting with Trusted Server

Cyber Security

ZeroNet: 51% Attack Risks & Mitigation