[squid-users] SSL-bump and Public Key Piinning (HPKP)

Walter H. Walter.H at mathemainzel.info
Sun Jul 5 14:01:52 UTC 2015


Hello,

I'm using squid with ssl-bump, after updating (I update only in bigger 
steps and not this often) my browser I realize,
that this supports HPKP; I didn't find how to deactivate this - Chrome 43

so I thought, I could prevent squid of replying this header field with this:

reply_header_access Public-Key-Pins deny all

but this doesn't really work; is there another way?

the squid is running in a VM on my own computer and only used by me;

Thanks,
Walter

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4312 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150705/e71d1658/attachment.bin>


More information about the squid-users mailing list