Ah, good to know, thanks for the info. Thanks, Dean Weimer Network Administrator Orscheln Management Co > -----Original Message----- > From: Henrik Nordström [mailto:henrik@xxxxxxxxxxxxxxxxxxx] > Sent: Friday, May 28, 2010 10:00 AM > To: Dean Weimer > Cc: squid-users@xxxxxxxxxxxxxxx > Subject: RE: Google SSL searches > > fre 2010-05-28 klockan 09:46 -0500 skrev Dean Weimer: > > Henrik, > > In cases like this, is it better to use the port 443 acl like you did > > in your example, instead of the proto HTTPS option? Just curious if > > the port acl is faster or has some other advantage over the proto acl. > > The proto acl won't work in this case as the protocol is not known on > CONNECT requests. All Squid knows about https requests when running as a > proxy is that the client wants to connect to hostname:port. > > proto https acls only works when Squid is operating as a proxy at the > https level, i.e. when used as a reverse proxy or when using sslbump. > > Regards > Henrik > >