[squid-users] grab hostnames via SNI to use it for parent proxy

Atman Sense atman.sense at zise.de
Thu Jun 4 15:59:24 UTC 2015


Hi,

I'm using privoxy in transparent/intercepting mode to filter tracking 
sites. Because many sites switched to https I want to block https sites, 
too (only by hostnames, I don't want to decrypt the SSL connections).

My idea was to use squid to intercept https connections and peek/splice 
to get the hostname via SNI.

The problem is: When using a parent proxy, squid always "CONNECT" the IP 
and not the hostname, even if it is aware of it through SNI. Can I get 
squid to use the hostnames instead of IPs?



More information about the squid-users mailing list