Indy https Dropbox 401 issue

[Kas Ob.]

Zitat von noisy_master:

Sounds good! I'll check....BUT: shouldn't i have the same issue with the browser then?

Good question !
And the answer is not always, see if browser like Chrome is using QUIC then possibly it will not intercepted by AV, that is one case.
Another case, it could be the AV had changed something in the request or the response header and violated the authentication.

In general AV with such enabled behavior intercept the traffic will not be changed or altered, but sometimes (not always) the connection belongs to some software that utilize protection against that like Signal, it will not allow such interception, like many social application, i did such protection in few projects by adding custom TLS extension as extra authentication between server-client, so even when using a certificate, my server/client connection can be checked against such interception, that about protection from an application side, there is another case where the AV insert a header declaring that the HTTP traffic had being inspected, this might lead also to violation in header signature if it was used.