Re: [squid-users] Denied pages for HTTPS requests

> WIth 307 they are supposed to repeat the CONNECT to the new address.
> Which can be a problem when you are changing protocols.
>
> 303 is probably your best bet for CONNECT. Many of the browsers
> simply
> reject anything other than successful tunnel opening. But at least
> 303
> specifies that a GET should be used when the redirect is followed. If
> you luck out and the client has a browser which does follow the
> redirect
> (one or two used to, not sure if any do now) it has a chance of
> working.
> Just a chance, most still will throw up their "friendly" alternative
> annoyance.
>
> Amos
>

Great thanks, I have something new now

with firefox there is message about dns

http://https//test.toto.com
Name Error: The domain name does not exist.

Maybe a problem with my rule ?

acl toto dstdomain .toto.com
http_access deny toto
deny_info 303:https://www.google.fr toto

Although there is "Location: https://www.google.fr\r\n" in the header
Received on Tue May 14 2013 - 14:33:49 MDT