[squid-users] Peek and splice without replacing the certificates

Matus UHLAR - fantomas uhlar at fantomas.sk
Mon Dec 14 14:20:05 UTC 2015


On 14.12.15 13:43, Парфенович Н.А. wrote:
>Hello! Show you how to use Squid in transparent mode for tracking HTTPS without replacing the certificates?

Not possible. Either you replace the certificates, or you CAN NOT track trhe
session.

the "s" part in https means that proxy can not see the encrypted connect,
thus it can not track it (=see what's inside).
-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
BSE = Mad Cow Desease ... BSA = Mad Software Producents Desease


More information about the squid-users mailing list