[squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

Antony Stone Antony.Stone at squid.open.source.it
Mon Sep 21 19:23:26 UTC 2015


On Monday 21 September 2015 at 21:20:19, Yuri Voinov wrote:

> 22.09.15 1:15, Amos Jeffries пишет:
>
> > HSTS is opt-out. Strip the *response* header on the first contact and it
> > disappears.
> 
> I can't. Because first connection can't occur during ISP ban by IP.
> First contact is never occurs.

If first contact never occurs, HSTS doesn't apply.  Client has no clue that the 
server requires HTTPS.


Antony.

-- 
"I estimate there's a world market for about five computers."

 - Thomas J Watson, Chairman of IBM

                                                   Please reply to the list;
                                                         please *don't* CC me.


More information about the squid-users mailing list