Re: [squid-users] Fwd: Squid and large object

From: Eliezer Croitoru <eliezer_at_ngtech.co.il>
Date: Tue, 15 Apr 2014 22:09:36 +0300

Some sites can be whitelisted for ICAP service.
Also the ICAP service needs to verify the preview and not always the
whole file.

Eliezer

On 04/15/2014 03:05 PM, Nick Hill wrote:
> This is down to a cost-benefit analysis.
>
> Does the current icap implementation cost more than the benefits of
> the security it brings?
>
> Or
> Would a little less security but more convenient functionality be
> better or worse?
> If better, would the costs of implementing that functionality be
> greater or less than benefits derived?
>
> A system which delivered the data to the client slower than the data
> received, and performed periodic checks as well as a check when data
> download complete may have a better cost-benefit trade-off.
>
> Inconvenient security can become insecure as users will look for ways
> to bypass the security.
>
Received on Tue Apr 15 2014 - 19:09:56 MDT

This archive was generated by hypermail 2.2.0 : Wed Apr 16 2014 - 12:00:05 MDT