-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
22.09.15 1:15, Amos Jeffries пишет: > On 22/09/2015 6:25 a.m., Yuri Voinov wrote: >> >> This is dig result: >> >> ;; ANSWER SECTION: >> torproject.org. 3600 IN A 93.95.227.222 >> torproject.org. 3600 IN A 154.35.132.70 >> torproject.org. 3600 IN A 86.59.30.40 >> torproject.org. 3600 IN A 82.195.75.101 >> torproject.org. 3600 IN A 38.229.72.16 >> >> This IP is banned. Completely. Outgoing packets are dropped by ISP. >> >> So this is critical to forward ALL session, starting with first packet, >> into Privoxy, and, then to Tor tunnel. >> >> Otherwise session can't be established. >> >> The problem enforces with HSTS onto torproject.org URL. Completely >> HTTPS. From first GET request. >> >> This can be solved with Tor Browser itself, but I want to find common >> solution. >> >> This is very simple. Complete HTTPS session must be forward to parent >> proxy at whole. Because of only HTTP's forwarding possibility is >> meaningless in HSTS-enabled world. > > HSTS is opt-out. Strip the *response* header on the first contact and it > disappears. I can't. Because first connection can't occur during ISP ban by IP. First contact is never occurs. > > >> >> This is feature request, Amos. Otherwise Squid lacks some critical >> functionality. >> > > Feature request implies something that is not supported being added. > CONNECT relay already is supported and works well for many others, just > apparently not for you. > > ... why? Don't understand. > > > Amos > _______________________________________________ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJWAFhzAAoJENNXIZxhPexG158H/3g0rZ4+btzOi7xoDzcArKfa n1m9nT95raM3r/ry0b/Ray8+K+8ZOWsYPrgxAV/XUUCwYzOBaSeFSiWDDlx1PUB+ /AesUdQcDWW014ejh70pE6a4U8wlwPkZecC71Pknq1qtVfjrjAlFE/hL4yIVnT+w EGEsY2wbmU3+SZEqa1aujx/RWTilKSGjBir9S7Cu8jg2/RdOfmW/dPumm7nXnThn zFqI269S+JzN9jWHttk4ISkCjdBEVH25flilhYCoQ3+EmaDV2X94dQiMWgo2xjsD dnaHUN/qcpRXK+Gjpi1T/SqtIDbHn72CX8mQdPZstWDH8kVgN/zdp4jnS1GClOY= =CjLG -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
