On 07.12.2015 08:49, Amos Jeffries wrote:
On 7/12/2015 5:41 p.m., Walter H. wrote:On 07.12.2015 00:21, Amos Jeffries wrote:Getting complicated...So xxiao8, why does one want to censor these requests anyway? Amostry to connect natively with the IP-Address instead of the hostname ... the SSL certificate of the host itself prevents the connection without message in the user agent ... TLS code: SQUID_X509_V_ERR_DOMAIN_MISMATCHxxiao was asking about http:// plain-text scope. TLS bugs in client UA (sending SNI with raw-IP values) are irrelevant there. Amos
then this "http_access deny CONNECT numeric_IPs" is wrong, because CONNECT and has nothing to do with http://, isn't it?
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
