Tdesktop: Feature Request: add HTTPS proxy

[s3rj1k]

In addition to HTTP proxy, would be nice to have option to use HTTPS proxy (tls+http)
for more security

[john-preston]

@s3rj1k There is no need for https here, because everything is encrypted using MTProto, so no one can see anything that would be hidden by https.

[s3rj1k]

MTProto can be detected by DPI and blocked, but if one would tunnel through HTTPS proxy no one sane would drop those packets.

[stek29]

Same applies for SOCKS (even with passwords) btw.

[s3rj1k]

@stek29 yep. But secure SOCKS (shadowsocks) is kind of hackish protocol.

On the other hand HTTPS is defacto standard, implemented in all major web browsers.

[s3rj1k]

@john-preston any news on this?

[john-preston]

@s3rj1k No news, sorry :( Current proxy implementation works through http://doc.qt.io/qt-5/qnetworkproxy.html and I'm not sure they support https proxy (otherwise it would work already).

[s3rj1k]

made JIRA issue for upstream https://bugreports.qt.io/browse/QTBUG-67709

[101usb]

Proxy authorization data transfers as a plain text (by design in RFC). It is not safe to use your application with a proxy in public networks. Please add support tls/ssl protocol for socks/http proxy

[stek29]

@101usb No, it is as safe to use Telegram with proxy as without proxy (so pretty much safe)

[s3rj1k]

@stek29 we would feel safer with TLS encryption option in proxy :)

[evgenylarin]

@stek29 @101usb mean that proxy credentials could be intercept by MITM and using, because credentials transfers as a plain text.

[john-preston]

@Aokromes I have HTTP and HTTPS requests used in tdesktop, but I'm not sure how you use HTTPS proxy there - I see only HTTP proxy type in docs.

[omkarnathsingh]

I tried a HTTPS proxy from here, https://us-proxy.org/ It worked for me in Tdesktop 1.2.18 alpha, although it displays HTTP in tdesktop UI.

[s3rj1k]

I'll just leave this link here (in russian)

[lgg]

@s3rj1k that link' tl;dr;

One of the biggest Russian ISP blocks MTProxy by checking packet sizes.

[stale[bot]]

Hey there!

This issue will be automatically closed in 7 days if there would be no activity. We therefore assume that the user has lost interest or resolved the problem on their own.

Don't worry though; if this is an error, let us know with a comment and we'll be happy to reopen the issue.

Thanks!

[s3rj1k]

Still an issue

[ilya-fedin]

Qt folks decided not to support HTTPS proxies, so tdesktop wouldn't have support for them as well:
https://bugreports.qt.io/browse/QTBUG-66601

[s3rj1k]

@ilya-fedin Well this is disappointing to say the least.