Normally you are forced to use a corporate proxy. This is necessary for the comp

Question

Normally you are forced to use a corporate proxy. This is necessary for the company to protect against the internet. But a side effect is, that the internet usage of every proxy user can be monitored by the company. This is something nobody wants.

In order to protect yourself against the company it is necessary to use another proxy controlled by yourself. This leads to a proxy in proxy configuration where the browser opens a connection to the corporate proxy and uses the CONNECT command to connect to your private proxy in order to pass the request to your private proxy, which connects to the target server fetching the URL and returning the result to the browser.

The question is: which browser or browser add-on supports this?

I know about tools like corkscrew, which can be used to achieve this. But I am looking for a browser only solution to avoid virus scanners reporting corkscrew as a hacking tool. And I would like to avoid writing a corkscrew clone in Java by myself.

Explanation / Answer

Technical details aside: what you are trying to do is to actively circumvent security systems which are established to protect the company. Be prepared that they'll fire you for this. Better use a different connection like a mobile phone for your private stuff.

Apart from that only simpler proxies allow to tunnel any traffic to pass within a CONNECT request. Proxies/Firewalls with SSL interception will reject traffic which is not really SSL so you cannot tunnel simple HTTP proxy traffic through the proxy. What might help in this case is a SSL VPN with proxy support, but even that might fail because the requests inside the tunnel don't look like HTTP. Another way would be to use an SSH client as a socks server if SSH traffic can pass through the firewall.

Related Questions

Navigate

• Browse (All)
• Browse N
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.