Top
Best
New

Posted by handfuloflight 3 days ago

Charles Proxy(www.charlesproxy.com)
328 points | 119 commentspage 3
Aldipower 3 days ago|
Used it heavily as my AS3 dev times from 2008 to 2011. Crazy that is still around.
1vuio0pswjnm7 3 days ago||
Is this "breaking TLS", as referred to here:

https://news.ycombinator.com/item?id=46214950

1vuio0pswjnm7 3 days ago||
Is the "breaking TLS" rant referring to the mechanism for doing so or to the reason why the mechanism is being used (and/or who is using it)
sflanker 3 days ago||
This is a totally different class of software than what that post is ranting about. Charles is a local developer tool intended for temporary use when debugging. It only inspects TLS connections if 1) you enable that feature and 2) you add the domain being connected to the list to be inspected.

That being said, the mechanism is the same. Charles generates a root certificate that it uses to issue certificates for each domain in intercepts a TLS connection for and you need to install that root certificate in your OS such that your clients will trust that certificate. If you have a client that doesn’t use the Mac OS certificate store you may have to do some extra per client configuration.

I also despise “security” tools that intercept and inspect TLS traffic (such as ZAcaler for example), but I find a Charles to be very useful for what it does and the TLS inspection support is easy to use and really helpful/necessary in some cases.

tgma 3 days ago||
More narrow cmdline http inspection tool https://github.com/signeen/inspect-http-proxy
eddywebs 3 days ago||
How come a reverse-proxy, better than the network tab in dev tools ?
efortis 3 days ago||
You can do more, e.g., changing the status code
leptons 2 days ago|||
Dev tools is an "inspector" and limited in scope, like a butter knife, a real proxy tool is like a Swiss Army knife.
keithnz 2 days ago||
super useful when you have an application, i.e. not a browser, that is making api calls that you want to inspect.
el_benhameen 3 days ago||
Just upgraded my license today, so I guess Charles is my new Baader-Meinhof token. Great tool! The ssl proxying is especially handy.
poemxo 3 days ago||
I like Burp Suite better for intercept and Squid better for a persistent proxy but maybe I'll give Charles another shot.
nunez 3 days ago||
Used this all of the time back in the day. Great tool.
ghxst 3 days ago||
I'd say Reqable is a worthy mention as well.
cxplay 2 days ago|
I'm also using Reqable, for those interested check it out: https://reqable.com
wahnfrieden 3 days ago||
Even after using it for years I could never recognize all its unlabeled icons without hovering for tooltip

I emailed the author about it a decade ago but he didn’t seem convinced

simultsop 3 days ago|
Tool that can't be beaten
More comments...