Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add session validation #13

Open
bneradt opened this issue Apr 10, 2020 · 1 comment
Open

Add session validation #13

bneradt opened this issue Apr 10, 2020 · 1 comment

Comments

@bneradt
Copy link
Collaborator

bneradt commented Apr 10, 2020

@SolidWallOfCode has mentioned that it would be helpful if Proxy Verifier had the ability to verify certain properties of the session. He mentioned specifically wanting to verify the ip address of the session. Here are other possible properties to validate:

  • Validate the ip protocol (v4 or v6)
  • Validate the HTTP protocol (HTTP/1 or HTTP/2)
  • Validate whether the connection is secured via HTTPS.

This would be server side session validation since the client itself connects according to its own parameters. Currently, verifier-server does no session validation against the way the proxy connects to it. This issue records the desire to be able to do such validation against the way the proxy connects to verifier-server.

@bneradt
Copy link
Collaborator Author

bneradt commented Jul 9, 2020

#29 gets us closer to this because it adds support for server-side protocol configuration on every proxy-request. On top of that, we would want to add verification to satisfy this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant