-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Here is access log when using IE: 1442863815.068 785 127.0.0.1 TCP_MISS/302 506 GET http://torproject.org/ - FIRSTUP_PARENT/127.0.0.1 text/html 1442863816.542 105231 127.0.0.1 TAG_NONE/200 0 CONNECT www.torproject.org:443 - HIER_DIRECT/2001:41b8:202:deb:213:21ff:fe20:1426 - 1442863821.899 105210 127.0.0.1 TAG_NONE/200 0 CONNECT www.torproject.org:443 - HIER_DIRECT/2001:41b8:202:deb:213:21ff:fe20:1426 - and then timeout. Sometimes second connect goes to IPv4 address, sometimes IPv6. When using Chrome/Firefox, session always starts from CONNECT 443 port. 22.09.15 1:23, Antony Stone пишет: > On Monday 21 September 2015 at 21:20:19, Yuri Voinov wrote: > >> 22.09.15 1:15, Amos Jeffries пишет: >> >>> HSTS is opt-out. Strip the *response* header on the first contact and it >>> disappears. >> >> I can't. Because first connection can't occur during ISP ban by IP. >> First contact is never occurs. > > If first contact never occurs, HSTS doesn't apply. Client has no clue that the > server requires HTTPS. > > > Antony. > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJWAFuDAAoJENNXIZxhPexGZIQH/3dB40+ex5LlrEoHmGZI2+x3 GApcjHp6vVJ4d9wrYwWLL8OWbSoUwInlifDO7MUK2kUVqXtGcKA/D5IPIT+wWToH pqhuimWuJLMWmfhWSEh02d60EhntxLWozrV9kA9XweFYeaccq9FDVs7N9CFDxQ/B axXJuToNTg47OieLjpa3gdNrIw/ENogLwzxlvCVyUdMF9cur+2Tfw9aM8D7hXeP1 AYmVq442guJc4x7DB67SwoGKNk+upUnkjHWK9x8WIgwpt/hsDoe+F1V5hmHHCPzE zixSZexV2xoPqOodwQ3o+pZaAQIinDMK/AUGDCM5a1QahozLsb5ST0vZBYk7mPs= =Dy1o -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
