Re: [squid-users] Transparent proxy with HTTPS on freebsd

On 29.04.09 04:58, nyoman karna wrote:
> you can NOT use transparent proxy for HTTPS.
>
> since using transparent proxy for HTTPS
> will be considered as man-in-the-middle attack.
>
> you probably may use PAC (as Amos suggested)
> but IMO it ruin the basic idea of using transparent proxy
> (which is user does not need to put any setting in their browser)

the whole idea of intercepting proxy (also called transparent) is sick.
WPAD is way to go - browser will autodetect the proxy, so user can log there
and all problems caused by intercepting connections will be gone.

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0...