[squid-users] How does squid know the url of https?

Amos Jeffries squid3 at treenet.co.nz
Mon Sep 26 04:38:02 UTC 2016


On 26/09/2016 1:28 p.m., Sergio Belkin wrote:
> I've read http://wiki.squid-cache.org/Features/SslBump
> 
> But I don't understand exactly how does squid to know the url.
> 
> Does squid a decryption is the client request?

Yes.

SSL-Bump is about performing an MITM interception attack on TLS traffic.
Decrypting it to get at the HTTP messages inside.

Since the original SslBump functionality is very much obsolete it is
perhapse best to read
<http://wiki.squid-cache.org/Features/SslPeekAndSplice> which explains
how the current releases do it.

Amos



More information about the squid-users mailing list