Unverified50% confidenceTradeoffExact time
当API请求经过聚合器中间层时,即使使用TLS/SSL加密,数据在聚合器服务器上仍需解密后才能转发(TLS终结),使聚合器理论上可记录完整请求内容和用户信息
1
Sources
50%
Confidence
Long-term
Relevance
8/16/2026
First Seen
Sources
Related Claims
VerifiedTLS encryption, on which HTTPS relies, only protects the transmission channel between two communication endpoints; in a relay proxy model, the relay server is the TLS session endpoint and can read plaintext request content after completing TLS termination.75% similarUnverifiedAn HTTPS man-in-the-middle proxy tool completes the TLS handshake with the app using its own certificate, while simultaneously establishing a separate TLS connection with the server using the server's real certificate, enabling decryption and re-encryption of encrypted traffic.72% similarUnverifiedTLS encryption only protects transmission security between the user and the relay server; relay server operators can technically log all of a user's conversation content.72% similarUnverifiedTLS encryption is terminated and re-established at each hop, meaning relay platforms themselves can still see plaintext data.69% similarVerifiedSSL/TLS certificates establish secure channels through asymmetric encryption technology and are issued by trusted CAs (Certificate Authorities).67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/757401API
curl https://kongchang.com/api/v1/knowledge/claims/757401MCP
get_claim(id=757401)