On 08/31/2018 09:44 AM, --Ahmad-- wrote: > if i wan to enable squid into intercpt/transparent or transparent > TCP_connect > > i dont want to decrypt the message > > all what i need say client requested google.com Extracting intended domain name information is usually possible today by examining TLS SNI values. However, the few folks controlling most of the world HTTPS traffic are working on making domain name information unavailable to (or at least essentially unusable by) proxies. Thus, I would not expect SNI-based logic to work long-term. Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
