Re: [squid-users] https facebook dstdomain acl doesn't work

On 29/02/2012 9:27 a.m., Muhammad Yousuf Khan wrote:
> Thanks,
>
> if i use squid as non transparent proxy would it work for HTTPS for
> just blocking a domain.

Yes. HTTPS tunnel CONNECT requests have a special type of URL, which
only contains deatinstion domain name and port. You can use the domain
name to block access in a forward proxy. Only the URL path and HTTP
header details are hidden inside the encryption.

Amos
Received on Wed Feb 29 2012 - 04:26:22 MST