Let us say that I want to access some sites blocked by the authority for any reason what-so-ever.
I understand that these sites can be accessed, sometimes with limited functionality, using anonymous proxies. But when you access sites like Google Sites, you need to provide your user name and password. Sometimes to upload your files, sometimes for read access only.
When I login to a site directly, my user name and password are sent encrypted over the network provided I access an
https site. However, when I login via proxy, my user name and password may be sent encrypted to the proxy site over the network, but the proxy site will have to submit it on my behalf and so it will have them in hand in clear text.
This is where I start feeling unsafe. Can the proxy site owner use my user name and password for unfair purposes?
Please point out whether my conjecture is incorrect.
Any tips or suggestions will also be welcome.