proxelar VS Tink

I wrote a man in the middle proxy for HTTP/1 - HTTP/2 and Web Socket wit SSL/TLS

We are looking for more contributors so if you want to collaborate you are of course welcome, if you can't, please consider leaving a star ⭐️, that would help!

Both, first I open my own project on GitHub and I try to upgrade it day by day. Developing a project usually I use other dependencies, when I find some bug in those dependencies I try to fix them

Hi everyone! Seeking feedback for MITM proxy written in Rust: github.com/emanuele-em/man-in-the-middle-proxy

The code is available on the project's GitHub page, and I welcome contributions from the community. The project's roadmap includes adding more functionality to the GUI, implementing request modification and duplication.

if you do not want to or cannot contribute it would be very helpful to star ⭐️ the project, thank you very much

> I wonder what people say when they find a bug despite you using standard crypto?

Not using TLS doesn't automatically mean you need to "roll your own crypto". They could have used a well documentend library such as Google Tink[1] instead of doing their own crypto.

[1] https://github.com/google/tink

I sort of rewrote google's tink project in rust. There is already a rust version by project oak but it didn't exactly jive.

PassManager uses the Tink library for encryption, which provides state-of-the-art** security for your passwords. Tink uses industry-standard encryption algorithms like AES to ensure that your passwords are kept safe from prying eyes.

Note that in the example jwt refers to the Tink jwt package.

What I can't tell is if the new version had any fixes related to the bug being discussed here

Even the slightest hiccup could leave me vulnerable. I don't want to roll my own encryption. I want to use something like tink (a secure crypto library by Google) but unfortunately they don't support node or Javascript (there's a library that was published 2 years ago).

I dont have an answer for you, but 2 resources that are worth checking out: https://developer.android.com/guide/topics/security/cryptography and https://developers.google.com/tink

> Do C (or something where the mapping to C is known), and lots of languages have FFI libs where wrapping that is fairly trivial

That is an interesting idea, yet still a lot of work, sadly. I was hoping somebody had done the legwork already. I looked at Tink [1] and age [2] based on my co-worker's recommendation, but they all seem to have limited implementations in other languages.

[1] https://github.com/google/tink

[2] https://github.com/FiloSottile/age