I put GitHub Copilot Behind a MITM Proxy. Here's What I Found.
Summary
The article investigates GitHub Copilot’s behavior when routed behind a MITM proxy, examining network traffic, authentication, model discovery, and how context is stored and reused. It uncovers that Copilot-related data, including user messages and assistant responses, can end up in plaintext in a local session store, highlighting privacy risks and the stateful nature of AI coding tools. The piece argues that context, history, and tools are increasingly becoming the product, creating both opportunities and confidentiality challenges for developers.