agent-browser supports safer TLS proxies
agent-browser’s Linux Chromium workflow accepts a proxy CA certificate through CLI, environment, config, or MCP settings. It enables HTTPS interception without disabling normal hostname and certificate validity checks.
This is a meaningful security upgrade for browser agents operating inside corporate networks, where broad certificate bypasses are an unacceptable shortcut.
- –Isolated NSS trust limits the trusted CA to the launched Chromium session
- –`--ca-cert` avoids the security risks of `--ignore-https-errors`
- –Retained trust across commands simplifies long-running agent workflows
- –Proxy CA support targets Zscaler, Netskope, mitmproxy, and similar TLS-intercepting environments
- –Linux-only support and incompatibility with CDP, profiles, and cloud providers remain notable constraints
DISCOVERED
1d ago
2026-08-29
PUBLISHED
1d ago
2026-08-28
RELEVANCE
AUTHOR
ctatedev
