HTTP proxy check

The HTTP proxy check checks whether the existing backend Connections of type http_proxy are configured securely. It is checked that TLS with certificate validation is used and that no unencrypted basic authentication is configured.

This ensures that connections that run via HTTP proxies are encrypted and cannot be read and manipulated by third parties.

Security procedure

Make sure that the URL in the configuration of the corresponding HTTP proxy connection under Settings→Backend Connections is an HTTPS URL and that the Disable TLS certificate check option is switched off. More details can be found under HTTP proxies.

The target server of the HTTP proxy must also be configured in such a way that encrypted connections are possible.