[squid-users] http request header must use hostname

[Walter H.]

On 07.12.2015 08:49, Amos Jeffries wrote:
> On 7/12/2015 5:41 p.m., Walter H. wrote:
>> On 07.12.2015 00:21, Amos Jeffries wrote:
>>> Getting complicated...
>>>
>>> So xxiao8, why does one want to censor these requests anyway?
>>>
>>> Amos
>> try to connect natively with the IP-Address instead of the hostname ...
>> the SSL certificate of the host itself prevents the connection without
>> message in the user agent ...
>>
>> TLS code: SQUID_X509_V_ERR_DOMAIN_MISMATCH
> xxiao was asking about http:// plain-text scope. TLS bugs in client UA
> (sending SNI with raw-IP values) are irrelevant there.
>
> Amos
then this

"http_access deny CONNECT numeric_IPs"

is wrong, because CONNECT and has nothing to do with http://, isn't it?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4312 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151207/c3a4f045/attachment-0001.bin>