Re: Tunneling through a hostile proxy?

2002-07-24 Thread John Kozubik
> separately, with the proxy able to observe cleartext. Could an SSH > connection be made under these conditions? SSH java applets exist: http://www.appgate.com/ag.asp?template=products&level1=product_mindterm http://javassh.org/ Therefore, you could simply publish the java ssh client of you

Re: Tunneling through a hostile proxy?

2002-07-24 Thread David Howe
John Kozubik <[EMAIL PROTECTED]> was seen to declaim: > SSH java applets exist: > http://www.appgate.com/ag.asp?template=products&level1=product_mindterm > http://javassh.org/ And indeed are very useful - but I think you miss the whole point of a java applet. the applet downloads to (and runs on)

Re: Tunneling through a hostile proxy?

2002-07-23 Thread Eric Murray
On Tue, Jul 23, 2002 at 09:42:49AM -0400, Trei, Peter wrote: > If you're interested in tunneling other protocols > than HTTP, things get more complex. Assuming > SSL tunneling is allowed you can run other > protocols through it if you can set up the software > at each end appropriatly. So who's

Re: CDR: Tunneling through a hostile proxy?

2002-07-23 Thread List Feed
Take a look at http://www.htthost.com This allows you to tunnel through a proxy using HTTP and arrive at an external tunnel server. The tunnel link through the proxy can be encrypted using a static symmetric key (no SSL). The tunnel server can be running on a machine over which you have contro

Re: Tunneling through a hostile proxy?

2002-07-23 Thread Riad S. Wahby
David Howe <[EMAIL PROTECTED]> wrote: > Not sure if it is what you are asking - but a HTTP proxy doesn't handle > the SSL; it simply forwards the packets to the destination site, and > forwards the reply back to you; the SSL encryption is handled by your > machine and the server (the proxy doesn't

Re: Tunneling through a hostile proxy?

2002-07-23 Thread David Howe
Roy M. Silvernail <[EMAIL PROTECTED]> was seen to declaim: > Given internet access from a private intranet, through an HTTP > proxy out of the user's control, is it possible to establish a secure > tunnel to an outside server? I'd expect that ordinary SSL > connections will secure user <-> proxy

RE: Tunneling through a hostile proxy?

2002-07-23 Thread Trei, Peter
> Roy M. Silvernail[SMTP:[EMAIL PROTECTED]] > > This may have been discussed before, but a Google search has > turned up lacking. > > Given internet access from a private intranet, through an HTTP > proxy out of the user's control, is it possible to establish a secure > tunnel to an outside s

Tunneling through a hostile proxy?

2002-07-23 Thread Roy M. Silvernail
This may have been discussed before, but a Google search has turned up lacking. Given internet access from a private intranet, through an HTTP proxy out of the user's control, is it possible to establish a secure tunnel to an outside server? I'd expect that ordinary SSL connections will secu