Re: [squid-users] SSLBUMP?

senthilkumaar2021 wrote:
> Hi
>
> Does sslBump Decrypt the https sites normally? or it just make CONNECT
> request as GET requests.
>

CONNECT tunnels contain any kind of requests. SslBump only undoes the
encryption wrapper and makes the internals visible to Squid.

This *is* "normally" what the receiving HTTPS website does. But is
happens in the middle.

> What are the advantages of using sslBump?
>

ICAP (read AV scanners) can check the content passing through. Have not
checked but it looks like Squid can use ACL on the internal request headers.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.7
   Beta testers wanted for 3.2.0.1