On Wed, Nov 20, 2013 at 10:12:20AM +0100, Massimo B.  wrote:
> Hello everybody,
> 
>
> * No ability to cache SSL.
> Ok, this is the nature of a proxy. The only location where SSL can be cached 
> is inside the browser.
> So there is a need for setting the browser to only cache SSL and disable the 
> plain cache in favour for the outside caching proxy. I filed a Feature 
> Request and found some already existing old request for that. You may vote 
> for it but I guess browser developers there don't see any reason for such a 
> feature.
> 
> https://bugzilla.mozilla.org/show_bug.cgi?id=217871#c7
> - RFE: cache only SSL content
> 
> 
> So...
> * Make Polipo a SSL inspecting proxy:
> This could be a solution, not the best. It would mean accepting polipo cert 
> and thrusting polipo. This would be acceptable for a personal proxy. However 
> the user would miss the ability to check certificates of sites from the 
> browser making all security warnings unfunctional there. This would also 
> mean to implement some Accept/Deny interface and/or certificate viewer 
> inside the proxy which would be far behind the simple caching functionality 
> and I guess Juliusz saying this is not part of a simple proxy.
> This is more like existing (commercial) webfilter implementations around 
> squid.

wwwoffle does implement this. Never tested it because it would make the 
CertPatrol
Ffx extension useless. However these days I am seeing so many cert changes 
displayed
by CertPatrol that it is becoming  useless itself - there is no way I could
reasonably check the 100 or so certificate changes I am seeing every day.

SSL/TLS is dead.


Richard

---
Name and OpenPGP keys available from pgp key servers


------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
_______________________________________________
Polipo-users mailing list
Polipo-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/polipo-users

Reply via email to