Corporate proxies and certificates

In Settings › Network you can choose:

• Use the system proxy settings, recommended: the same as your browser;
• No proxy (direct connection);
• Manual proxy, with an address like http://proxy.example.com:8080, then Apply.

With the system settings, the app uses those of Windows (Settings › Network & internet › Proxy, with automatic detection, setup script or manual proxy) or of the Mac (System Settings › Network › Details › Proxies). If the system has no proxy, it uses the HTTPS_PROXY, ALL_PROXY or HTTP_PROXY environment variables, with exceptions in NO_PROXY; otherwise it connects directly. On Linux the app only reads the environment variables, not the GNOME or KDE proxy settings: if the proxy is set only there, use the manual proxy.

A proxy doesn’t weaken security: the archive’s certificate is verified through the proxy exactly as without one.

Unsupported proxies

These cases show up as “Archive unreachable” when signing in, or “Offline: will retry automatically” while syncing, even if the browser opens the archive.

Case	What to do
Proxy requiring authentication (NTLM, Kerberos, or a proxy username and password)	IT adds the archive address, for example *.archivionline.it, to the proxy exceptions or the PAC script (DIRECT), or allows unauthenticated access to that domain.
Proxy or firewall that inspects encrypted traffic with a company certificate	The company root certificate must be installed among the system’s trusted certificates, or the archive domain excluded from inspection. The app doesn’t let you ignore an invalid certificate.
PAC script using non-standard functions, or not downloadable within 10 seconds	Check that the script returns PROXY host:port or DIRECT for the archive, or set HTTPS_PROXY for the user.
SOCKS proxy	Not supported: use an HTTP proxy for the archive or a direct connection.

Other common causes

• Wrong date and time on the computer can make a certificate look invalid: set them automatically.
• Public Wi-Fi with a sign-in page: open a page in the browser first and complete the network sign-in.