[squid-users] Browser circunvents acl's blocking https (intercept mode)

[Amos Jeffries]

On 23/04/2016 10:08 p.m., Jason Haar wrote:
> On Sun, Apr 17, 2016 at 9:11 PM, Amos Jeffries wrote:
> 
>> Like Jok mentioned Chrome is probably using QUIC protocol or one of the
>> other non-HTTPS is uses.
>>
> 
> 
> Other non-HTTPS? Can you expand on that? I'm aware of QUIC (udp/443) and
> ensure our firewalls block it so as to force it to tcp/443 - but you're
> implying there are yet more alternatives?

There are a couple of versions of SPDY and WebSockets at least. They
tend to announce these things a year or so after its been up and
running, so there may be others I've not heard of yet.

Amos