On Monday, November 01, 2021 14:58 GMT, Alex Rousskov <rouss...@measurement-factory.com> wrote: On 11/1/21 3:59 AM, k...@sudo-i.net wrote: > On Saturday, October 30, 2021 01:14 GMT, Alex Rousskov wrote: >> >> AFAICT, in the majority of deployments, the mismatch between the >> >> intended IP address and the SNI/Host header can be correctly handled >> >> automatically and without creating serious problems for the user. Squid >> >> already does the right thing in some cases. Somebody should carefully >> >> expand that coverage to intercepted traffic. Frankly, I am somewhat >> >> surprised nobody has done that yet given the number of complaints!
> Not sure what do you mean with "Somebody should carefully expand that > coverage to intercepted traffic"? I meant that somebody should create a high-quality pull request that modifies Squid source code to properly address the problem you, AFAICT, are suffering from. There is already code that handles similar situations correctly. Alex. Ok Alex, I will try to implement it. https://github.com/chifu1234/squid -- Kevin Klopfenstein Bellevuestrasse 103 3095 Spiegel, CH sudo-i.net
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ squid-dev mailing list squid-dev@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-dev