>Joseph, there's no point of matching https because when your browser >using SQUID as a proxy, > >it sends CONNECT request and then exchange SSL traffic which squid >can't/won't touch at all. so the acls, they can't be applied. Good point, I match on "facebook.com" as a whole here and it works fine.