<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA1 <br>
<br>
I was shaking in my boots :))))))))))<br>
<br>
While HTTPS bullshit - you can have nothing to fear. ;)<br>
It not me - Bruce opinion. :)<br>
<br>
05.02.2015 1:19, Daniel Greenwald пишет:<br>
<span style="white-space: pre;">> squid beware, the pins and
staples are coming....<br>
><br>
> -----------<br>
> Daniel I Greenwald<br>
><br>
><br>
><br>
> On Wed, Feb 4, 2015 at 1:03 PM, Yuri Voinov
<<a class="moz-txt-link-abbreviated" href="mailto:yvoinov@gmail.com">yvoinov@gmail.com</a> <a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><mailto:yvoinov@gmail.com></a>> wrote:<br>
><br>
><br>
><br>
> 04.02.2015 21:39, Amos Jeffries пишет:<br>
> > On 4/02/2015 7:32 p.m., Jason Haar wrote:<br>
> >> On 04/02/15 18:47, Daniel Greenwald wrote:<br>
> >>> And happens to be one that squid desperately
needs to remain in order<br>
> >>> to continue ssl bumping..<br>
> >> ...and is one that diminishes in value as cert
pinning becomes more<br>
> >> popular...<br>
> >><br>
> >> It's a tough life: on the one hand we want to do TLS
intercept in order<br>
> >> to do content filtering of HTTPS (because the bad
guys are deliberately<br>
> >> putting more and more malware onto HTTPS websites),
and yet on the other<br>
> >> hand we all want some things to be private.<br>
> >><br>
> >> Bring back RFC3514, then all of this would be
easy!!!<br>
> >><br>
><br>
> > While Squid is not able to be section-3 compliant due to
lack of a<br>
> > portable system API. By building with
--disable-http-violations it<br>
> > becomes mostly compliant with section-4 under its role
as a network<br>
> > protection gateway. ;-P<br>
><br>
> > Amos<br>
><br>
> > _______________________________________________<br>
> > squid-users mailing list<br>
> > <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:squid-users@lists.squid-cache.org"><mailto:squid-users@lists.squid-cache.org></a><br>
> > <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> Http violations is our all. :-P<br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-rfc2396E" href="mailto:squid-users@lists.squid-cache.org"><mailto:squid-users@lists.squid-cache.org></a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBAgAGBQJU0nHSAAoJENNXIZxhPexG6nwH/0KqqATFPr5/9+2X8zDu+lo0
<br>
zk9+nE4HEq554iqD9l5OeLaWUnu1luQESWsNJTED/tPAbiAymIwhaykn/DotxJut
<br>
JvudAd26+JHUlT0ApAzMt2oDpYasJgYmOcVZIp04fVKxJs9e0wzxE9kNYb2iNoyc
<br>
HfF/MWyQ/it0eb0rqklc0b8aQ6DAkbkl8TXWEXi+MNCHJcImnOO4GHiCHE1+UWb9
<br>
HMSLT7OMoC/fHjyfVHbxP3JyeqV9SbykBMQOCVXpXgZBXPpP2NaaQgBcFDXY2Hjt
<br>
PxxsqEEbshR+REM1XBpmTHC8wa+UPY0zgzeSi9Fpm+9AZMSrB3lT9FkBdMsxNjs=
<br>
=pUGw
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>