Re: [squid-users] transparent squid + clamav + https

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Wed, 17 Mar 2010 07:51:22 +0100

ons 2010-03-17 klockan 03:53 +0000 skrev Amos Jeffries:

> During the infected period imaginary-HAVP scans the documents and sends a
> large "clean" prefix to all visitors.
> BUT... aborts when the appended infection is detected. Browser is lucky
> enough to notice the file is incomplete and retires later with a range
> request for the missing bit.
>
> a) during the infected period the fetched ranges will never succeed.

ok.

> b) after the infection is cleaned up the file will pass through
> imaginary-HAVP and client will get a truncated version. With complete-file
> being indicated.

Only if the server is seriously broken and uses the same cache validator
for this modified response.

This is exacly why ETag SHOULD be used and not Last-Modified.

Regards
Henrik
Received on Wed Mar 17 2010 - 06:51:27 MDT

This archive was generated by hypermail 2.2.0 : Wed Mar 17 2010 - 12:00:04 MDT