On 07.12.2015 08:49, Amos Jeffries wrote:
On 7/12/2015 5:41 p.m., Walter H. wrote:On 07.12.2015 00:21, Amos Jeffries wrote:Getting complicated... So xxiao8, why does one want to censor these requests anyway? Amostry to connect natively with the IP-Address instead of the hostname ... the SSL certificate of the host itself prevents the connection without message in the user agent ... TLS code: SQUID_X509_V_ERR_DOMAIN_MISMATCHxxiao was asking about http:// plain-text scope. TLS bugs in client UA (sending SNI with raw-IP values) are irrelevant there. Amos
then this "http_access deny CONNECT numeric_IPs" is wrong, because CONNECT and has nothing to do with http://, isn't it?
<<attachment: smime.p7s>>
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
