[squid-users] Client to proxy encryption for Internet Explorer

[Panagiotis Bariamis]

 >Unfortunately the answer there is "no" in regard to IE support. AFAIK
>the MS team working on IE also have no plans to add it. IE is formally
>on its way towards deprecation so major new functionality like that is
>highly unlikely to happen. Their Edge browser may be a different story.
Well if they add in in Edge it is going to be system wide as in Internet
Explorer. Hopefully they will add the functionality at least at Edge.


>Which leaves only the SSL-Bump functionality in Squid to MITM the traffic.
This functionality does not help much as the problem is the credentials
sent over clear text to proxies .

Thank you for the clarifications.


On Fri, Apr 20, 2018 at 9:25 PM, Amos Jeffries <squid3 at treenet.co.nz> wrote:

> On 21/04/18 05:53, Panagiotis Bariamis wrote:
> > Hello ,
> > I have managed to set up a forward Secure squid proxy (tls) .
> > Although Mozzila (through a pac file with "RETURN HTTPS x.y.z:443) and
> > chrome (with command line argument "--proxy-server="https://x.y.z" )
> > work OK with the squid proxy , Internet Explorer seems as if doesn't
> > support that function .
> > Are there any other configuration in Internet Explorer to work or some
> > auxiliary program for windows to support squid server with directive
> > https_port for forward proxying ?
> >
>
> Unfortunately the answer there is "no" in regard to IE support. AFAIK
> the MS team working on IE also have no plans to add it. IE is formally
> on its way towards deprecation so major new functionality like that is
> highly unlikely to happen. Their Edge browser may be a different story.
>
> There are a number of tools for tunneling traffic over a proxy but they
> tend to be for non-HTTP(S) protocols to go over a regular HTTTP
> forward-proxy.
>
> Which leaves only the SSL-Bump functionality in Squid to MITM the traffic.
>
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20180420/a6d180d6/attachment.html>