Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It seems that squid only "sees" the domain name for https requests.

Is there any way to configure it so that the full url can be logged and/or matched within ACLs?


share|improve this question

migrated from May 17 '11 at 16:43

This question came from our site for computer enthusiasts and power users.

No, there is no way. It is within the encrypted channel. There are other tools that permit you to perform a man-in-the-middle attack, which make this possible. They are tricky to setup since they require you to setup a CA, and install a certificate on every client machine.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.