Re: [squid-users] transparent proxy for CONNECT method

From: Matus UHLAR - fantomas <uhlar_at_fantomas.sk>
Date: Sat, 11 Apr 2009 10:08:00 +0200

On 07.04.09 19:27, nyoman karna wrote:
> it's been long I've accepted the fact
> that transparent proxy will not work for CONNECT method
> because of security issues (considered as man-in-the-middle attack).
>
> but perhaps there's a way to get around this problem?
> because everyone will stuck with using GMail, YahooMail, etc
> since they're all using HTTPS for signing in.

disable HTTPS usage or live with the fact t can not be proxied.
The whole purpose of HTTPS is that noone in the middle (proxy or admin of
intermediate gateway) can see the content (and thut there's nothing to
proxy).

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Nothing is fool-proof to a talented fool. 
Received on Sat Apr 11 2009 - 08:08:07 MDT

This archive was generated by hypermail 2.2.0 : Sat Apr 11 2009 - 12:00:02 MDT