[plug] https question

[Adrian Chadd]

On Thu, Oct 26, 2006, Michael Holland wrote:
> On Thu, 26 Oct 2006, Jason wrote:
> 
> > Does proxy software, such as squid, store image files that are browsed
> > via an https connection in a non-encrypted fashion?
> 
> If that were even possible there would be a serious security failure!
> End-to-end encryption. Unless squid has the man-in-the-middle patch.

If it did we wouldn't tell people. :)

(No, squid doesn't keep a record of the data going through a CONNECT method.
It -will- if Squid has been loaded with an SSL certificate and speaks non-SSL to
the origin server (eg, for SSL offloading and acceleration.)



Adrian