Re: transparent https interception

On Tue, Jun 19, 2007, Henrik Nordstrom wrote:
> tis 2007-06-19 klockan 17:37 +0800 skrev Adrian Chadd:
> > Gah, I got another email about transparent https interception.
>
> Heh..
>
> > I guess this means I'll just have to bloody write it. My main question
> > is which ACL types people would like to support. Initially it'd be
> > easy to support source and destination IP, logging the transaction
> > time and TX/RX bytes.
>
> Yes.
>
> And maybe also some way to verify that there really is an SSL
> handshake.. (also relevant to CONNECT).

If I do this I could also implement the tunneling from Steven Wilton
for "transparent" tunneling of unparseable HTTP requests; with similar
ACLing.

What do you think?

Adrian
Received on Tue Jun 19 2007 - 09:24:05 MDT