{"action":"created","issue":{"url":"https://api.github.com/repos/jay0lee/GAM/issues/45","labels_url":"https://api.github.com/repos/jay0lee/GAM/issues/45/labels{/name}","comments_url":"https://api.github.com/repos/jay0lee/GAM/issues/45/comments","events_url":"https://api.github.com/repos/jay0lee/GAM/issues/45/events","html_url":"https://github.com/jay0lee/GAM/issues/45","id":62122006,"number":45,"title":"Proxy CONNECT uses IP address rather than domain name","user":{"login":"rjaffey","id":11504326,"avatar_url":"https://avatars.githubusercontent.com/u/11504326?v=3","gravatar_id":"","url":"https://api.github.com/users/rjaffey","html_url":"https://github.com/rjaffey","followers_url":"https://api.github.com/users/rjaffey/followers","following_url":"https://api.github.com/users/rjaffey/following{/other_user}","gists_url":"https://api.github.com/users/rjaffey/gists{/gist_id}","starred_url":"https://api.github.com/users/rjaffey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rjaffey/subscriptions","organizations_url":"https://api.github.com/users/rjaffey/orgs","repos_url":"https://api.github.com/users/rjaffey/repos","events_url":"https://api.github.com/users/rjaffey/events{/privacy}","received_events_url":"https://api.github.com/users/rjaffey/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-03-16T15:47:03Z","updated_at":"2015-03-17T15:56:34Z","closed_at":null,"body":"My organization uses a proxy for outbound HTTP and HTTPS access to internet resources from a server farm.  Access through the proxy is only authorized to specific domain names (e.g. .google.com, .googleapis.com, .apple.com, .microsoft.com, etc.).  This works fine for clients that issue\r\n\r\n\"CONNECT &lt;host.domain.name&gt;:&lt;port&gt;\"\r\n\r\nrequests in order to tunnel HTTPS connections through the proxy.  With exception of GAM, all of our clients issue \"CONNECT\" this way.  In GAM's case\r\n\r\n   httplib2/socks.py\r\n\r\nbuilds\r\n\r\n\"CONNECT &lt;ipaddress&gt;:&lt;port&gt;\"\r\n\r\nrequests instead.  This makes it challenging to limit destinations using our proxy server implementation, as we would have to allow access to all of Google's address space in order for GAM to work.  It would therefore be desirable for GAM to CONNECT via domain name if possible."},"comment":{"url":"https://api.github.com/repos/jay0lee/GAM/issues/comments/82433241","html_url":"https://github.com/jay0lee/GAM/issues/45#issuecomment-82433241","issue_url":"https://api.github.com/repos/jay0lee/GAM/issues/45","id":82433241,"user":{"login":"jay0lee","id":4623536,"avatar_url":"https://avatars.githubusercontent.com/u/4623536?v=3","gravatar_id":"","url":"https://api.github.com/users/jay0lee","html_url":"https://github.com/jay0lee","followers_url":"https://api.github.com/users/jay0lee/followers","following_url":"https://api.github.com/users/jay0lee/following{/other_user}","gists_url":"https://api.github.com/users/jay0lee/gists{/gist_id}","starred_url":"https://api.github.com/users/jay0lee/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jay0lee/subscriptions","organizations_url":"https://api.github.com/users/jay0lee/orgs","repos_url":"https://api.github.com/users/jay0lee/repos","events_url":"https://api.github.com/users/jay0lee/events{/privacy}","received_events_url":"https://api.github.com/users/jay0lee/received_events","type":"User","site_admin":false},"created_at":"2015-03-17T15:56:34Z","updated_at":"2015-03-17T15:56:34Z","body":"httplib2 is upstream of GAM and would need to be patched there:\r\n"}}