In the ElectronJS application I developed, I'm using the Axios library for API requests. The issue I'm facing is that if the user adds the proxy information of tools like Fiddler, Burp Suite, Mitmproxy, which are used for monitoring network traffic, all the requests made by the application become visible. To prevent this, I need to perform SSL verification, but I'm unable to do so. How can I achieve or prevent this?
Asked
Active
Viewed 18 times
-1
-
1https://stackoverflow.com/questions/51363855/how-to-configure-axios-to-use-ssl-certificate – deekep Aug 13 '23 at 23:53
-
1I'm not sure of your motivation, but if you're trying to hide secret API keys and what not in your application, all of that information can still be easily hijacked. Additionally, by not trusting the user's root keys, you will also break compatibility for the handful of people behind big corporatey nosey firewall appliances. – Brad Aug 14 '23 at 00:03