Gradle Could not HEAD https://..pom > peer not authenticated

Change your repository syntax to one of the following repositories { jcenter { url “http://jcenter.bintray.com/” } } repositories { maven { url “http://repo1.maven.org/maven2” } } Current (2.1) gradle docs claims that Warning: Be aware that the central Maven 2 repository is HTTP only and HTTPS is not supported. If you need a public HTTPS enabled … Read more

fiddler2 unable to generate certificate

In Win7 So go here: C:\Users\<username>\AppData\Roaming\Microsoft\Crypto\RSA\ Select all the files (named with UUIDS). Move those files to your Desktop or other folder outside AppData dir. Launch Fiddler, go to Tools | Fiddler Options | Enable HTTPS decryption See that it works this time (hopefully). Move the files back from their temp location (i.e., Desktop), to … Read more

Replay attacks for HTTPS requests

HTTPS is not replayable, the first server response in the handshake sequence includes a server-chosen random number. What Fiddler does is act as a proxy, meaning it intercepts your browser’s requests, and then generates an identical request to the server, meaning it has access to the plaintext, which is what it will be replaying. Your … Read more

How does HTTPS provide security?

Very simply, HTTPS uses Secure Socket Layer to encrypt data that is transferred between client and server. SSL uses the RSA algorithm https://en.wikipedia.org/wiki/RSA_(cryptosystem), an asymmetric encryption technology. The precise details of how the algorithm works is complex, but basically it leverages the fact that whilst multiplying two large prime numbers together is easy, factoring the … Read more

What’s the de facto standard for a Reverse Proxy to tell the backend SSL is used?

The proxy can add extra (or overwrite) headers to requests it receives and passes through to the back-end. These can be used to communicate information to the back-end. So far I’ve seen a couple used for forcing the use of https in URL scheme: X-Forwarded-Protocol: https X-Forwarded-Ssl: on X-Url-Scheme: https And wikipedia also mentions: # … Read more