On Fri, May 15, 2020 at 09:42:57PM +0000, Eric Wong wrote: > That said, I'm not sure if any client-side caching proxies can > MITM HTTPS and save bandwidth with HTTPS everywhere, nowadays. > I seem to recall polipo being abandoned because of HTTPS. > Maybe there's a caching HTTPS MITM proxy out there... Right, this can't operate as a transparent proxy. However, it could work in combination with insteadOf on the client, e.g., if the repo URL is https://example.com/foo/bar.git, the CI builder could set a global insteadOf in /etc/gitconfig before kicking off the job: [url http://local.proxy] insteadOf = https://example.com This way CI job maintainers could continue to use canonical repo URLs, but actual requests would go out to the local proxy and be cached. -K
