Hacker News new | ask | show | jobs
by dndn1 1119 days ago
MITM will see everything, but this should be the case with headers as well as GET params, passwords/tokens/data etc.
1 comments

In case there is no MITIM but the original link was written using the plain HTTP then the proxy would see it anyway, before upgrading to SSL CONNECT.