Do not turn HTTPS in proxy.types directly into an https:// proxy URL. ProxyBroker's test sends CONNECT for port 443 and starts TLS to the destination through that tunnel.

For the ordinary HTTP listener tested that way, export:

http://proxy.example:8080

The destination can still be HTTPS. TLS from the client to the proxy listener is a separate capability needing separate evidence.

Keep the successful type labels with the endpoint. is_working becomes true when any enabled protocol test succeeds, so it does not establish every required protocol. If the workflow needs CONNECT to 443, a successful HTTP or SMTP-port test is insufficient.

The checker can also disable checks when the corresponding judges are unavailable. Preserve the test conditions and selected type instead of reducing the export to an unqualified working flag or promising later availability.

Artiglyn mynjee