Class MitmExclusionDefaults

Default hostname exclusions for MITM proxies (Microsoft identity / certificate pinning). Use with BypassRules and DecryptSsl.

Inheritance

object

MitmExclusionDefaults

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Namespace: Titanium.Web.Proxy

Assembly: Titanium.Web.Proxy.dll

Syntax

public static class MitmExclusionDefaults

Fields

SystemProxyBypassRules

WinINET / system-proxy bypass patterns for Microsoft identity endpoints (Entra / WAM / RDP).

Declaration

public static readonly string[] SystemProxyBypassRules

Field Value

Type	Description
string[]

TunnelOnlyPinningDomains

Pinning hosts that should tunnel (DecryptSsl=false) but stay visible.

Declaration

public static readonly string[] TunnelOnlyPinningDomains

Field Value

Type	Description
string[]

Methods

ApplyDecryptExclusions(ExplicitProxyEndPoint, Func<bool>)

Registers per-CONNECT DecryptSsl gating on an explicit endpoint (Merge mode).

Declaration

public static void ApplyDecryptExclusions(ExplicitProxyEndPoint endPoint, Func<bool> decryptHttpsEnabled)

Parameters

Type	Name	Description
ExplicitProxyEndPoint	endPoint
Func<bool>	decryptHttpsEnabled

ApplyDecryptExclusions(ExplicitProxyEndPoint, Func<bool>, IEnumerable<string>?, IEnumerable<string>?)

Registers per-CONNECT DecryptSsl gating on an explicit endpoint (Merge mode).

Declaration

public static void ApplyDecryptExclusions(ExplicitProxyEndPoint endPoint, Func<bool> decryptHttpsEnabled, IEnumerable<string>? decryptSkipHosts, IEnumerable<string>? decryptOnlyHosts)

Parameters

Type	Name	Description
ExplicitProxyEndPoint	endPoint
Func<bool>	decryptHttpsEnabled
IEnumerable<string>	decryptSkipHosts
IEnumerable<string>	decryptOnlyHosts

ApplyDecryptExclusions(ExplicitProxyEndPoint, Func<bool>, IEnumerable<string>?, IEnumerable<string>?, MitmExclusionMode)

Registers per-CONNECT DecryptSsl gating on an explicit endpoint.

Declaration

public static void ApplyDecryptExclusions(ExplicitProxyEndPoint endPoint, Func<bool> decryptHttpsEnabled, IEnumerable<string>? decryptSkipHosts, IEnumerable<string>? decryptOnlyHosts, MitmExclusionMode mode)

Parameters

Type	Name	Description
ExplicitProxyEndPoint	endPoint
Func<bool>	decryptHttpsEnabled
IEnumerable<string>	decryptSkipHosts
IEnumerable<string>	decryptOnlyHosts
MitmExclusionMode	mode

CreateSystemProxySettings()

Builds SystemProxySettings with factory identity bypass rules and loopback (Merge).

Declaration

public static SystemProxySettings CreateSystemProxySettings()

Returns

Type	Description
SystemProxySettings

CreateSystemProxySettings(bool)

Builds SystemProxySettings with factory identity bypass rules (Merge).

Declaration

public static SystemProxySettings CreateSystemProxySettings(bool proxyLoopback)

Parameters

Type	Name	Description
bool	proxyLoopback

Returns

Type	Description
SystemProxySettings

CreateSystemProxySettings(bool, IEnumerable<string>?)

Builds SystemProxySettings with identity bypass rules and optional user additions (Merge).

Declaration

public static SystemProxySettings CreateSystemProxySettings(bool proxyLoopback, IEnumerable<string>? additionalBypassRules)

Parameters

Type	Name	Description
bool	proxyLoopback
IEnumerable<string>	additionalBypassRules

Returns

Type	Description
SystemProxySettings

CreateSystemProxySettings(bool, IEnumerable<string>?, MitmExclusionMode)

Builds SystemProxySettings from factory and/or caller bypass rules.

Declaration

public static SystemProxySettings CreateSystemProxySettings(bool proxyLoopback, IEnumerable<string>? bypassRules, MitmExclusionMode mode)

Parameters

Type	Name	Description
bool	proxyLoopback	When true, localhost uses the proxy (platform-specific loopback rule).
IEnumerable<string>	bypassRules	Extra rules in Merge, or the full authoritative list in Replace.
MitmExclusionMode	mode	Merge factory OS-bypass defaults, or replace them with bypassRules.

Returns

Type	Description
SystemProxySettings

HostnameMatches(string, string)

Wildcard-aware hostname match (*.example.com).

Declaration

public static bool HostnameMatches(string hostname, string pattern)

Parameters

Type	Name	Description
string	hostname
string	pattern

Returns

Type	Description
bool

IsBuiltInSslBypass(string)

True when hostname matches factory OS-bypass or tunnel-only defaults.

Declaration

public static bool IsBuiltInSslBypass(string hostname)

Parameters

Type	Name	Description
string	hostname

Returns

Type	Description
bool

ShouldDisableSslDecrypt(string?)

Returns true when CONNECT should use SSL passthrough instead of MITM (Merge mode).

Declaration

public static bool ShouldDisableSslDecrypt(string? hostname)

Parameters

Type	Name	Description
string	hostname

Returns

Type	Description
bool

ShouldDisableSslDecrypt(string?, IEnumerable<string>?, IEnumerable<string>?)

Returns true when TLS should stay opaque (no MITM decrypt) using Merge.

Declaration

public static bool ShouldDisableSslDecrypt(string? hostname, IEnumerable<string>? userSkipHosts, IEnumerable<string>? userOnlyHosts)

Parameters

Type	Name	Description
string	hostname
IEnumerable<string>	userSkipHosts
IEnumerable<string>	userOnlyHosts

Returns

Type	Description
bool

ShouldDisableSslDecrypt(string?, IEnumerable<string>?, IEnumerable<string>?, MitmExclusionMode)

Returns true when TLS should stay opaque (no MITM decrypt). Merge: factory SSO/pinning hosts always skip, then user skip / optional decrypt-only allowlist. Replace: only userSkipHosts and optional userOnlyHosts apply (factory hosts are not forced).

Declaration

public static bool ShouldDisableSslDecrypt(string? hostname, IEnumerable<string>? userSkipHosts, IEnumerable<string>? userOnlyHosts, MitmExclusionMode mode)

Parameters

Type	Name	Description
string	hostname
IEnumerable<string>	userSkipHosts
IEnumerable<string>	userOnlyHosts
MitmExclusionMode	mode

Returns

Type	Description
bool