HTTPS proxy - Google Calendar

The application-level proxy technology gives you the possibility to keep your data stored in a cloud confidential. The video demonstrates that Zorp can analyze the traffic between the client (Thunderbird) and the cloud service (Google Calendar), identify the sensitive parts (for example description), encrypt them when they go to the cloud service provider, and decrypt them when they go back.
The video demonstrates that the traffic between Thunderbird and Google Calendar can be intercepted by Zorp. Zorp, as an application-level firewall technology, terminates the secure (HTTPS) connection between the client and the server, decrypts it on the client-side, parses, analyzes, potentially modifies it, and encrypts it again on the server-side. On the firewall, the plain traffic is accessible. In this point of view, it is a man-in-the-middle but it is controlled by network administrator.
When the calendar data goes to Google, Zorp encrypts the sensitive parts in it (for example description) so after they leave the private network which is protected by Zorp, they cannot be accessed neither by the cloud provider nor by the crackers. As the web access is not intercepted by Zorp, data decryption does not take place, so only the encrypted data can be seen in the browser. To prevent any misunderstandings: the video shows only the proof of concept of the transparent encryption of sensitive data on a network security device. Keep in mind that base64, is definitely not an encryption algorithm, but it is quite good for demonstration purposes. It can be changed to any kind of encryption algorithm, like public-key cryptography.