Public bug reported:

Many schools and businesses are using Squid as a content filter for
their internal networks.

The current squid package distributed by Ubuntu works great for this,
except that SSL gatewaying support is not enabled, creating a filtering
vulnerability: wherever possible, users can easily switch from the HTTP
to the HTTPS protocol to bypass content filtering.

The workaround is to add two switches at compile time:
       --enable-ssl
       --enable-ssl-crtd

As this seems to simply enable a feature, is there any reason not to
enable these?

SOURCE: https://github.com/ra-at-diladele-com/qlproxy_external/wiki
/Filtering-HTTPS

** Affects: squid3 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to squid3 in Ubuntu.
https://bugs.launchpad.net/bugs/1294810

Title:
  Please Enable SSL Gatewaying Support

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/squid3/+bug/1294810/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to