[squid-users] Re: PAM authenticator

Technically it would be possible to SSL encrypt the traffic between the
browser and the proxy, but unfortunately none of the browsers on the
market supports this...

Maybe you can convince the Mozilla people that SSL encryption of proxy
connections is a good thing? It is already supported by Squid-2.5 and
later and most likely also by Apache+mod_ssl+mod_proxy, only the support
in browsers are missing..

Minor note to clarify what I am talking about: If requesting SSL sites
over an SSL encrypted proxy connection then there will be SSL ontop of
SSL. First SSL between the browser and the proxy, and ontop of this SSL
between tbe browser and the origin server.

Regards
Henrik

roodee wrote:
>
> Hello,
>
> While searching around for authenticators I stumbled across your PAM module.
> Thanks for the code. I was wondering if you have any ideas on how to get
> around the basic authentication problem. I'd love to use the PAM
> authenticator to talk to my KDC but don't want my username floating around
> with basic HTTP encryption (none). I've been thinking about it for some time
> but am out of ideas..
>
> Thanks,
> --
> roodee-at-thummy-dot-com
> www.thummy.com
Received on Sat Jun 01 2002 - 07:04:27 MDT