このページはまだお使いの言語では用意されていません。英語の文章をご覧いただいています。
Glossary
Proxy authentication
Proxy authentication is the login a proxy demands before it will carry a single request for you.
How a proxy asks for the login
A proxy that wants a login turns the first request away and names itself in the refusal. The browser then repeats the request with the pair attached.
HTTP and HTTPS addresses
The refusal carries a challenge, and the answer rides in a header on every request after it.
SOCKS5 addresses
The login is a separate step of the handshake, before the browser names the site it wants.
A pair for the hop, not for the site
It belongs to the proxy alone. The site you open never sees it and never asks for it.
Why the launch line is the wrong place
A pair written into the address a browser is launched with sits in plain view of every process running under your account.
It also does not work. Measured on the build shipping today:
- Pair written into the launch address
- 0 requests, nothing loaded
- Plain loopback address with a relay in front
- 13 requests through the proxy
Measured on ARMANOS Browser 153.0.7978.0. The engine rejects a login written into the launch address, so most paid addresses would open nothing at all.
Where the pair lives instead
A small relay runs on loopback for the life of the window. It speaks to the browser with no login at all and to your proxy with the real pair.
The password stays inside the running program and never reaches a launch line.
This machine only
A connection from anywhere else is dropped, so the relay cannot become an open proxy for strangers.
A pass for this launch
Another program here would need a pass issued for this run, and only the profile's own browser is given it.
Gone with the window
The port stops existing the moment the profile closes, and the next launch takes a different one.
A refused login is not a way out
A proxy that rejects the pair answers with a refusal, and that refusal reaches the page instead of being swallowed.
The window stops loading. It does not fall back to your own connection, which would put your real address on the very site you were working in.
Often confused with
Signing in to a site
That login belongs to the account you are opening. It travels to the site, and the proxy never sees it.
Access bound to your own address
Some sellers tie the proxy to your IP instead of a password. Then there is no login and no relay, and a change of your own line breaks access.
An SSH login
SSH presents its own pair inside its own encrypted handshake. It is never handed to a proxy as a header.
What this does not do
- It does not encrypt your traffic. A login proves who is connecting, and the hop to an ordinary HTTP address stays as plain as it was.
- It does not hide you from the owner of the address. Whoever runs it sees every connection opened through it, login or not.
- The built in engine cannot log in to SOCKS5 at all. A paid SOCKS5 with a password needs the ARMANOS Browser engine, or an HTTP address instead.
- It does not make the address yours. A login says which customer you are, not that nobody else leaves through the same exit.
Check it
Each claim above is one place in the code and one stand.
- The relay that carries the login, and what it turns away
- apps/desktop/src/lib/proxyAuthBridge.js
- Real sockets against HTTP and SOCKS5 proxies that demand a login
- apps/desktop/test/proxy-auth-bridge.js
- An address with a password really carries traffic on the shipped engine
- apps/desktop/test/прокси-с-паролем-живьём.js
- The check button takes the same road a launch takes
- apps/desktop/test/proxy-check-uses-bridge.js
Questions
- Can I write the login into the proxy address?
- Not on this engine. It rejects that form outright, and a profile set up that way loads nothing at all.
- Does the password reach the sites I open?
- No. Past the SOCKS5 handshake the request is addressed to the site itself and carries nothing belonging to the proxy.
- Where does the password live between runs?
- The system closes it with the same means it keeps your other passwords, and the app holds no key of its own to fall back on.
- The seller changed my password and nothing loads.
- The saved pair is now wrong and the address answers with a refusal. Edit the entry and press the check button on that row.
- Can another program here use my paid address?
- It would have to present the pass issued for this launch, and only the profile's own browser is given it.
Put one paid address behind a profile
The free plan gives two profiles, with no time limit and no card.