TCP-over-HTTPS

[abhinavsingh]

Currently here is how ProxyPoolPlugin works:

1. Accepts HTTP proxy request (in plain text) from the clients
2. Forwards the proxy request to one of the upstream proxies from the pool (in plain text)
3. If proxy request is a CONNECT request, clients establish a secure tunnel with upstream proxy

Unfortunately, outgoing information in step 2) is not encrypted. To make the communication more secure:

• ProxyPoolPlugin must support a TCP-over-HTTPS mode
• This can be achieved simply by connecting to a HTTPS upstream proxy. Note that, proxy.py already supports end-to-end encryption mode.

Further, ProxyPoolPlugin is only capable of handling HTTP(s) protocol. A TCP-over-HTTPS plugin will allow any TCP protocol exchange with upstream proxy over HTTPS.