[squid-users] ICAP and 403 Encapsulated answers (SSL denied domains)

[FredB]

>
> As a workaround, you can try disabling client-to-Squid persistent
> connections (client_persistent_connections off) or changing your ICAP
> service to produce a response with a non-empty 403 body.


You are right this is a browser bug (firefox at least recent versions) 
and this issue can be resolved by client_persistent_connections off 
unfortunately non-empty body is not enough

I will post a bug report to firefox

I found nothing in documentation about client_persistent_connections off 
impact, do you think this can be problematic with high load ?

Fred