Post

Replies

Boosts

Views

Activity

Reply to UDP TransparentProxyProvider
With more testing I've learned there are a few reasons packets might not be intercepted. Only outbound requests (so called connections) are intercepted. Sequencing and timing when enabling a SysEx are also important. After rewriting my UDP flow copier to use NWConnection with ".udp" and debugging I found a working combination.
Aug ’25
Reply to Enterprise Install for a TLS Inspection proxy
Thanks for the quick response. The bigger picture is we provide a lightweight forwarder that runs on every endpoint to collect information on user activity (anonymized to protect user privacy) which it then sends to a cloud based analytics service. The problem is how to simplify deploying the macOS forwarder to thousands of endpoints in an MDM managed enterprise. Expecting every endpoint user to authenticate as an administrator is not a great user experience. Having our analytics server get the needed configuration profile from each endpoint and somehow forward it to the MDM to download is a difficult problem so I'm looking for any creative suggestions.
Topic: Privacy & Security SubTopic: General Tags:
12h
Reply to UDP TransparentProxyProvider
A unit test in Swift Testing.
Replies
Boosts
Views
Activity
Aug ’25
Reply to UDP TransparentProxyProvider
With more testing I've learned there are a few reasons packets might not be intercepted. Only outbound requests (so called connections) are intercepted. Sequencing and timing when enabling a SysEx are also important. After rewriting my UDP flow copier to use NWConnection with ".udp" and debugging I found a working combination.
Replies
Boosts
Views
Activity
Aug ’25
Reply to Enterprise Install for a TLS Inspection proxy
Thanks for the quick response. The bigger picture is we provide a lightweight forwarder that runs on every endpoint to collect information on user activity (anonymized to protect user privacy) which it then sends to a cloud based analytics service. The problem is how to simplify deploying the macOS forwarder to thousands of endpoints in an MDM managed enterprise. Expecting every endpoint user to authenticate as an administrator is not a great user experience. Having our analytics server get the needed configuration profile from each endpoint and somehow forward it to the MDM to download is a difficult problem so I'm looking for any creative suggestions.
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
12h
Reply to Enterprise Install for a TLS Inspection proxy
This is of course for enterprise or government customers who need some ability to audit how their systems are being used while at the same time protecting user privacy by anonymizing user data unless there is evidence of anomalous high risk activity. I understand there may not be an easy solution for Macs.
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
11h