[squid-users] Alert unknown CA

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
I was shaking in my boots :))))))))))

While HTTPS bullshit - you can have nothing to fear. ;)
It not me - Bruce opinion. :)

05.02.2015 1:19, Daniel Greenwald пишет:
> squid beware, the pins and staples are coming....
>
> -----------
> Daniel I Greenwald
>
>
>
> On Wed, Feb 4, 2015 at 1:03 PM, Yuri Voinov <yvoinov at gmail.com
<mailto:yvoinov at gmail.com>> wrote:
>
>
>
> 04.02.2015 21:39, Amos Jeffries пишет:
> > On 4/02/2015 7:32 p.m., Jason Haar wrote:
> >> On 04/02/15 18:47, Daniel Greenwald wrote:
> >>> And happens to be one that squid desperately needs to remain in order
> >>> to continue ssl bumping..
> >> ...and is one that diminishes in value as cert pinning becomes more
> >> popular...
> >>
> >> It's a tough life: on the one hand we want to do TLS intercept in order
> >> to do content filtering of HTTPS (because the bad guys are deliberately
> >> putting more and more malware onto HTTPS websites), and yet on the
other
> >> hand we all want some things to be private.
> >>
> >> Bring back RFC3514, then all of this would be easy!!!
> >>
>
> > While Squid is not able to be section-3 compliant due to lack of a
> > portable system API. By building with --disable-http-violations it
> > becomes mostly compliant with section-4 under its role as a network
> > protection gateway. ;-P
>
> > Amos
>
> > _______________________________________________
> > squid-users mailing list
> > squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
> > http://lists.squid-cache.org/listinfo/squid-users
> Http violations is our all. :-P
>
>
>     _______________________________________________
>     squid-users mailing list
>     squid-users at lists.squid-cache.org
<mailto:squid-users at lists.squid-cache.org>
>     http://lists.squid-cache.org/listinfo/squid-users
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBAgAGBQJU0nHSAAoJENNXIZxhPexG6nwH/0KqqATFPr5/9+2X8zDu+lo0
zk9+nE4HEq554iqD9l5OeLaWUnu1luQESWsNJTED/tPAbiAymIwhaykn/DotxJut
JvudAd26+JHUlT0ApAzMt2oDpYasJgYmOcVZIp04fVKxJs9e0wzxE9kNYb2iNoyc
HfF/MWyQ/it0eb0rqklc0b8aQ6DAkbkl8TXWEXi+MNCHJcImnOO4GHiCHE1+UWb9
HMSLT7OMoC/fHjyfVHbxP3JyeqV9SbykBMQOCVXpXgZBXPpP2NaaQgBcFDXY2Hjt
PxxsqEEbshR+REM1XBpmTHC8wa+UPY0zgzeSi9Fpm+9AZMSrB3lT9FkBdMsxNjs=
=pUGw
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150205/83d459aa/attachment.html>