RE: [squid-users] Google SSL searches

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Fri, 28 May 2010 17:00:13 +0200

fre 2010-05-28 klockan 09:46 -0500 skrev Dean Weimer:
> Henrik,
> In cases like this, is it better to use the port 443 acl like you did
> in your example, instead of the proto HTTPS option? Just curious if
> the port acl is faster or has some other advantage over the proto acl.

The proto acl won't work in this case as the protocol is not known on
CONNECT requests. All Squid knows about https requests when running as a
proxy is that the client wants to connect to hostname:port.

proto https acls only works when Squid is operating as a proxy at the
https level, i.e. when used as a reverse proxy or when using sslbump.

Regards
Henrik
Received on Fri May 28 2010 - 15:00:17 MDT

This archive was generated by hypermail 2.2.0 : Fri May 28 2010 - 12:00:06 MDT