Re: [squid-users] Transparent proxy with HTTPS on freebsd

Hi Jeff,

On Mon, 04 May 2009, Jeff Sadowski wrote:

> On Mon, May 4, 2009 at 3:35 PM, Gavin McCullagh <gavin.mccullagh_at_gcd.ie> wrote:
> >> the whole idea of intercepting proxy (also called transparent) is sick.
> >
> > Would you care to substantiate that in a bit more detail?
>
> If your blocking content that would violate rights, maybe; if you are
> doing it to speed things up or blocking sites that have no place in
> the current facility I can not see how it can be claimed as sick.
> I think blocking most porn from schools and work is right. Maybe even
> blocking youtube from work because of how much time is waisted.

I think this misses the issue. A web proxy is indeed a convenient way to
apply these sorts of blocks. However, whether you force people to
configure proxies in order to get web access or you do it transparently
doesn't change the blocking.

Currently we have a very short list of blocked sites based mostly on file
sharing. Personally, I'd like to remove that as I don't consider it
useful. In certain labs (ie where the students use our computers) at
certain busy times of the year we occasionally block "time-waster" sites in
order to free up those computers for students doing assignments. Those who
use their own laptops on wifi don't experience that.

Our students are adults. We don't generally block based on content. In
Ireland (where we are), primary and secondary schools are all given a
government-sponsored central broadband connection which is content filtered
transparently. It's not squid, but it's the same principal. Personally, I
don't really like the idea, but being pragmatic, I understand why they did
it. Prior to filtering, a large number of teachers were dead set against
giving web access to students (we had bought our own connection). Now that
they have a comfort blanket of state-sponsored content filtering, they're
fine with students using it. Sadly, sites like youtube are blocked due to
unsuitable content, which is really a shame as there is lots of very useful
content.

We recently started using HAVP to block viruses/malware, but I think most
people would agree that that's in the student's interest.

Transparent proxying (as opposed to wpad) doesn't make any of this blocking
easier, though I guess perhaps it makes it less apparent. However, it
makes net access far more convenient (as against wpad) for the user.

Gavin
Received on Mon May 04 2009 - 23:17:38 MDT