Re: Transparent Proxy and HEAT.NET

Jason Ackley wrote:

> Yes, basically you have to have a direct connection to them, the
> webservers will reject with then mentioned error when the IP for
> the SSL socket does not match the IP for the HTTP socket. This of
> course could have changed since I have been there but it sounds
> like the exact same thing..

Alias yet another site who have misunderstood the concept of IP
addresses and HTTP security. See numberous posts and articles why IP
based security in WWW applications is close to void today.

This will not only fail in environments using transparent proxying for
port 80, but it will also fail if a cache hierarchy is used or even if a
cache array is used.

---
Henrik Nordstrom
Spare time Squid hacker