Reputation
1,613
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
3 12 25
Newest
 Curious
Impact
~255k people reached

Mar
19
awarded  Curious
Jan
30
awarded  Popular Question
Nov
16
awarded  Yearling
Oct
12
awarded  Nice Question
Sep
24
awarded  Autobiographer
Sep
8
awarded  Notable Question
Jul
2
awarded  Notable Question
Feb
28
answered What is the “right way” to monitor network?
Feb
24
awarded  Famous Question
Jan
31
awarded  Popular Question
Jan
15
awarded  Nice Question
Nov
16
awarded  Yearling
Oct
23
accepted How can I configure Apache to always return an error
Oct
22
awarded  Popular Question
Oct
4
awarded  Popular Question
Sep
20
comment Can Bash Tell Me Which SSH Public Key Was Used To Authenticate?
Whoah.. really? Cool! You mean in ~/.ssh/authorized_keys? I never knew about this.
Sep
20
asked Can Bash Tell Me Which SSH Public Key Was Used To Authenticate?
Sep
11
awarded  Citizen Patrol
Aug
15
answered Linux poll() with 1 fd slow after a write, fast after a read
Aug
15
comment Easiest way to allow direct HTTPS connection in Intercept mode?
@Nicolo you tell your users that all domain names resolve to your Squid server. While Squid can inspect unencrypted traffic to see the intended destination of HTTP/1.1 requests (but not HTTP/1.0 traffic which doesn't mandate a Host: header) it is impossible for Squid to decrypt HTTPS traffic to find out the intended destination. So no matter what you do it is game over if you give fake IP addresses via DNS to your clients. Interception is usually done via redirect rules on a router (e.g. Linux and iptables). This is why you are being queried as to why you don't just redirect port 80.