09How does a corporate TLS inspection proxy work, and what security and privacy risks does it introduce?▼mediumNewPalo Alto NetworksCiscoCheck Point○ sign inInspection is a man in the middle the organisation chose. Interviewers want the mechanism, then a clear view of the new single point of failure it creates and the traffic it must never touch.Open full answer →
21Forward proxies, reverse proxies and WAFs: how each works, which headers you can trust behind them, and how WAFs get bypassed.▼mediumNewGoogleAmazonMicrosoft◆ premiumPut a proxy in front of an app and two new questions appear: who is the real client, and does the proxy read the request the same way the app does?Open full answer →
19What is HTTP request smuggling, and why does it happen?▼hardNewGoogleAmazonMicrosoft◆ premiumTwo servers disagree about where one request ends and the next begins. The scored answer explains the ambiguity, what an attacker gains, and why consistent parsing and HTTP/2 end to end fix it.Open full answer →