Re: [squid-users] SSL-proxy filtering

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 31 Mar 2005 00:26:06 +0200 (CEST)

On Wed, 30 Mar 2005, [ISO-8859-1] Henrik Østerlund Gram wrote:

> As I understand from the FAQ and some old mails from 2000 in the
> archive, filtering https urls or content is not supported -

Correct, you can only filter https by destination server name, not
complete URL.

> and that is is so primarily for political reasons.

No, purely technical reasons. The URL is encrypted by SSL and not visible
to the proxy. All the proxy sees is a bidirectional stream of random data.

Regards
Henrik
Received on Wed Mar 30 2005 - 15:26:07 MST

This archive was generated by hypermail pre-2.1.9 : Fri Apr 01 2005 - 12:00:03 MST