I currently use Squid for caching the web. I'm planning to add a filter to block ads and to remove browser information. When a website uses HTTPS it would completely bypass the filter.
I could use a MITM proxy which dynamically generates certificates for each website. The client would have to install a CA certificate. But I'm not sure how you can verify the real certificate then.
Basically what I'm looking for is an equivalent to:
Firefox + ad blocker + other filtering plugins
but the ad blocker + other filtering plugins would be managed at a central proxy server. You trust the central proxy server in the same way you would trust the firefox plugins.
Is there an open source solution for this? Or any technology I should look into?