Hi, I need for testing purpose (i have to test and debug several mobile phone java application some of that using https/ssl) to intercept and decrypt https traffic; I configured one debian box with squid 3.1 (compiling it with ssl support) enabling sslBump feature with a self signed certificate, obviously browser and applications warn about the certificate but all seems to work. Is there a way to use trusted certificate for removing that warning (sorry for this dumb question but some applications doesn't permit certificate exception list like firefox for example)? Another question is about ICAP, i read on Squid-cache wiki that is possible to use ICAP server to inspect traffic ("While decrypted, the traffic can be inspected using ICAP"), is there some hints regarding which ICAP server use (C-ICAP? or other ICAP server) and some configuration example about it? I didn't find many informations about. Thanks for your patience Best Regards Franz