Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

NGiNX reverse proxy can take care of this and does so securely, am I right?


Nginx ssl reverse proxy does not verify certificates. I tested by reverse proxying to an ssl server with a self signed certificate. Nginx did not log any warnings or complain.


No, nginx is on the server side. The article is about client-side.


You can use nginx as a proxy on your side for any APIs. Just proxy_pass it to the API, and listen only on the local side. It can provide caching and other stuff that way.


Yeah, but that's proxy, not reverse proxy. It's possible to do something fiddler-like using apache or nginx to mitm oneself and dump everything that goes through.


Probably they can.

However, I don't know anything about using nginx that way. If you give me a link or something like that, I'll happily add it to my article. Or I'll just investigate later.


Yeah my bad I read your article assuming you were an API provider not a consumer. In the case of consuming API’s I suggest python-requests, an excellent library that is extremely well maintained.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: