|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I was shaking in my boots :)))))))))) While HTTPS bullshit - you can have nothing to fear. ;) It not me - Bruce opinion. :) 05.02.2015 1:19, Daniel Greenwald пишет: > squid beware, the pins and staples are coming.... > > ----------- > Daniel I Greenwald > > > > On Wed, Feb 4, 2015 at 1:03 PM, Yuri Voinov <yvoinov@xxxxxxxxx <mailto:yvoinov@xxxxxxxxx>> wrote: > > > > 04.02.2015 21:39, Amos Jeffries пишет: > > On 4/02/2015 7:32 p.m., Jason Haar wrote: > >> On 04/02/15 18:47, Daniel Greenwald wrote: > >>> And happens to be one that squid desperately needs to remain in order > >>> to continue ssl bumping.. > >> ...and is one that diminishes in value as cert pinning becomes more > >> popular... > >> > >> It's a tough life: on the one hand we want to do TLS intercept in order > >> to do content filtering of HTTPS (because the bad guys are deliberately > >> putting more and more malware onto HTTPS websites), and yet on the other > >> hand we all want some things to be private. > >> > >> Bring back RFC3514, then all of this would be easy!!! > >> > > > While Squid is not able to be section-3 compliant due to lack of a > > portable system API. By building with --disable-http-violations it > > becomes mostly compliant with section-4 under its role as a network > > protection gateway. ;-P > > > Amos > > > _______________________________________________ > > squid-users mailing list > > squid-users@xxxxxxxxxxxxxxxxxxxxx <mailto:squid-users@xxxxxxxxxxxxxxxxxxxxx> > > http://lists.squid-cache.org/listinfo/squid-users > Http violations is our all. :-P > > > _______________________________________________ > squid-users mailing list > squid-users@xxxxxxxxxxxxxxxxxxxxx <mailto:squid-users@xxxxxxxxxxxxxxxxxxxxx> > http://lists.squid-cache.org/listinfo/squid-users > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJU0nHSAAoJENNXIZxhPexG6nwH/0KqqATFPr5/9+2X8zDu+lo0 zk9+nE4HEq554iqD9l5OeLaWUnu1luQESWsNJTED/tPAbiAymIwhaykn/DotxJut JvudAd26+JHUlT0ApAzMt2oDpYasJgYmOcVZIp04fVKxJs9e0wzxE9kNYb2iNoyc HfF/MWyQ/it0eb0rqklc0b8aQ6DAkbkl8TXWEXi+MNCHJcImnOO4GHiCHE1+UWb9 HMSLT7OMoC/fHjyfVHbxP3JyeqV9SbykBMQOCVXpXgZBXPpP2NaaQgBcFDXY2Hjt PxxsqEEbshR+REM1XBpmTHC8wa+UPY0zgzeSi9Fpm+9AZMSrB3lT9FkBdMsxNjs= =pUGw -----END PGP SIGNATURE----- |
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
