On 30.04.25 14:39, Renzo Marengo wrote:
what you are saying It's very interesting, infact previously I understood
CONNECT method was invoked both by http and by https protocols.
You are saying CONNECT method is invoked only if protocol is https, while
if you type http://site:port, no CONNECT method is invoked.
Right ?
Correct.
While it is possible to issue CONNECT for HTTP request, most clients do not
do that, and squid does not allow by default CONNECT requests to port 80
(where most HTTP servers listen at).
The FTP requests are often also issued through GET/PUT requests instead of
CONNECT, the default FTP port 21 is also not allowed by default.
Also, using GET requests gives us advantage to cache content on proxy's
side, which may benefit us in lower latency and spared bandwidth.
There's still much of internet content that is available without encryption,
like CRL lists or any kinds of signed content, where you don't have to be
afraid of it being modified, e.g. debian packages
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I just got lost in thought. It was unfamiliar territory.
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users
