{"version":"2.1.307","anchor":"proxy-tls-agent-verifies-the-real-target-host","canonical_anchor":"proxy-tls-agent-verifies-the-real-target-host","heading":"HTTPS proxy connections check the certificate of the real destination","tier":"notice","area":"Network","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307\/e\/proxy-tls-agent-verifies-the-real-target-host","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307","markdown":"### HTTPS proxy connections check the certificate of the real destination\n\nThrough an HTTPS proxy, Claude Code checks the certificate against the site it is reaching, not against the proxy\n\n**What**\n\nClaude Code can send its traffic through an HTTPS proxy, a go-between server that forwards connections. When it does, it now checks the security certificate against the server it is actually trying to reach, not against the proxy.\n\nWhen the destination is a bare IP address rather than a name, no server name is sent.\n\n**Why**\n\nThis changes how Claude Code confirms it is talking to the right server when it connects through an HTTPS proxy.\n\n- Area: Network\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5\n- Scope: both\n- Heads-up: no"}