Hacker News Reader

A comment in a previous thread states that amberExpress uses OnDemand VPN (https://news.ycombinator.com/item?id=6890266). I assume that they use a transparent proxy to insert code the banner code into the store's own web site.

Assuming that's the case, (how) does it work if the store uses HTTPS for normal product pages?

View on HN

With OnDemand VPN you can push a HTTP(s) proxy. Apple is awesome.

My question still stands, whether they are using a transparent or normal proxy.

If a proxy is used to intercept and modify HTTPS traffic, the server certificate used for the connection between the proxy and the client would be invalid (I mean it would not be signed by a CA trusted by the client). Desktop browsers report an error in response to this condition. I don't know about mobile safari.

How do they deal with this?

Sorry for my late answer and for not understating the question initially.

We pass https traffic as is, we obviously can't look in it or manipulate it.

However most of the products (something like 98%) are on http connections.

Reply on news.ycombinator.com