-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 22.09.15 1:23, Antony Stone пишет: > On Monday 21 September 2015 at 21:20:19, Yuri Voinov wrote: > >> 22.09.15 1:15, Amos Jeffries пишет: >> >>> HSTS is opt-out. Strip the *response* header on the first contact and it >>> disappears. >> >> I can't. Because first connection can't occur during ISP ban by IP. >> First contact is never occurs. > > If first contact never occurs, HSTS doesn't apply. Client has no clue that the > server requires HTTPS. > > > Antony. > I think so. But in access.log I see only HIER_DIRECT CONNECT to torproject.org:443 and no answer from server. Browser shows ERR_TIME_OUT. HTTP sites works perfectly via tunnel. But HTTPS-versions is not. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJWAFnQAAoJENNXIZxhPexGT+gH/RzgRrz1uvHMYK3eYYDY1m/X SEAnGVI6nTBOqoLY9XUlOagAd2ZkG3HEQwprQI+JoL4s0r7ibmpvC7mHhuzfJJqw qADltTiQKPXPEMr2hcKOfrWUAqUSNNSsMb/RvIWQ8sEAv3q63Gtn+BrGhHpFGp/c yJ1OUB6BzoOmQeNOeuJOkKODf1VBE+KiXb45JyFFBmMplsOs1+HInPtyo9R/MOyb SPlGgR9QcLDUVTVG8VGHObHXBRwhgiw64sgnyxq70w/6IkEVweQY5qixk9r+4Lb9 oZBYx1XBanWSAq22W5zo7jaeDdFsiI8gOxX32hljLL9GYcr4pwN15Z2XCA09+24= =uSS6 -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users