Re: [squid-users] HSTS and HPKP

2018-07-26 Thread Amos Jeffries
On 27/07/18 16:10, Gordon Hsiao wrote: > I'm running squid4.1 interception peek+splice mode. > > Some sites with HSTS(max-age=0) will not work whenever squid is on, HSTS > max-age=0 is supposed to turn off HSTS, but chrome/firefox will keep > redirecting https<-->http until it failed(too many redi

[squid-users] HSTS and HPKP

2018-07-26 Thread Gordon Hsiao
I'm running squid4.1 interception peek+splice mode. Some sites with HSTS(max-age=0) will not work whenever squid is on, HSTS max-age=0 is supposed to turn off HSTS, but chrome/firefox will keep redirecting https<-->http until it failed(too many redirects). Once Squid is removed all is good. I als