HTTP Proxy Check
The HTTP Proxy Check verifies whether the existing backend Connections of type http_proxy are configured securely.
It checks that TLS with certificate validation is used and that no unencrypted Basic Authentication is configured.
This ensures that connections running through HTTP proxies are encrypted and cannot be intercepted or manipulated by third parties.
Steps to Secure the System
Ensure that, in the configuration of the corresponding HTTP proxy connection under Settings → Backend Connections the URL is an HTTPS URL, and that the option Disable TLS Certificate Verification is disabled. For more details, see HTTP Proxies.
In addition, the HTTP proxy’s destination server must be configured to allow encrypted connections.
