Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2017-03-24 Thread Hans-Christoph Steiner
Michael Rogers: > On 22/03/17 12:54, Nathan of Guardian wrote: >> On Wed, Mar 22, 2017, at 08:23 AM, Michael Rogers wrote: >>> Following up on an old thread to let you know that unfortunately the >>> approach we found for getting OkHttp to use a SOCKS proxy isn't safe. In >>> some cases OkHttp

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2017-03-22 Thread Michael Rogers
On 22/03/17 12:54, Nathan of Guardian wrote: > On Wed, Mar 22, 2017, at 08:23 AM, Michael Rogers wrote: >> Following up on an old thread to let you know that unfortunately the >> approach we found for getting OkHttp to use a SOCKS proxy isn't safe. In >> some cases OkHttp will try to resolve

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2017-03-22 Thread Michael Rogers
On 06/09/16 10:48, Hans-Christoph Steiner wrote: > > The Briar folks are working on getting HTTP connections on Android to go > through Tor via SOCKS. They used a custom SocketFactory and Socket > subclasses, with their own SOCKS handling. > >

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2016-09-23 Thread Hans-Christoph Steiner
Nathan of Guardian: > > > On Thu, Sep 22, 2016, at 03:52 PM, Hans-Christoph Steiner wrote: >> I didn't find a solid reference yet, but this test for me confirms that >> at least in terms of HttpURLConnection on android-22, SOCKS proxies do >> not work: >> >> URL url = new

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2016-09-22 Thread Hans-Christoph Steiner
Hans-Christoph Steiner: > > > Michael Rogers: >> On 06/09/16 11:54, Hans-Christoph Steiner wrote: >>> Have you run tests yet of HTTPS verification using your technique? You >>> can take code from the NetCipher tests if you want. >> >> Thanks, that's a good idea. We've tried it with a few

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2016-09-22 Thread Hans-Christoph Steiner
Michael Rogers: > On 06/09/16 11:54, Hans-Christoph Steiner wrote: >> Have you run tests yet of HTTPS verification using your technique? You >> can take code from the NetCipher tests if you want. > > Thanks, that's a good idea. We've tried it with a few HTTPS sites but > haven't done any

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2016-09-22 Thread Hans-Christoph Steiner
Mark Murphy: > On Tue, Sep 6, 2016, at 05:48, Hans-Christoph Steiner wrote: >> Could we use this approach in NetCipher? > > IIRC, NetCipher has SOCKS support. The exception is with OkHttpClient, > and that's because Square is not explicitly supporting SOCKS with > OkHttp3: > >

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2016-09-06 Thread Michael Rogers
On 06/09/16 11:54, Hans-Christoph Steiner wrote: > Have you run tests yet of HTTPS verification using your technique? You > can take code from the NetCipher tests if you want. Thanks, that's a good idea. We've tried it with a few HTTPS sites but haven't done any testing in depth. > I don't

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2016-09-06 Thread Mark Murphy
On Tue, Sep 6, 2016, at 05:48, Hans-Christoph Steiner wrote: > Could we use this approach in NetCipher? IIRC, NetCipher has SOCKS support. The exception is with OkHttpClient, and that's because Square is not explicitly supporting SOCKS with OkHttp3: https://github.com/square/okhttp/issues/2315

Re: [guardian-dev] supporting SOCKS on Android via a custom SocketFactory

2016-09-06 Thread Michael Rogers
On 06/09/16 10:48, Hans-Christoph Steiner wrote: > Could we use this approach in NetCipher? I think Torsten that said this > approach requires android-14 at least, but we could just use HTTP > proxies to support older platforms. As far as I know this should work on any version of Android, but