4 ms·

My reaction when the same thing keeps being a security problem...seriously, wasn't there a major WPAD/PAC issue earlier this year?

• Spooky23 9y ago
  WPAD is a shitshow and has been for years. It’s impossible to troubleshoot and doesn’t work well, but at the same time, it’s the “best worst” solution for many LANs. I think the right answer to this type of issue is autoconf, but that isn’t widely adopted.
  • snuxoll 9y ago
    I'd love for there to be a better solution, because as you say it's the "best worst" solution in many cases.
    • Spooky23 9y ago
      There are better solutions, but they won’t work everywhere. Transparent proxies come to mind.
      • snuxoll 9y ago
        Transparent proxies break horribly when you need to deal with HTTPS, and I’m not talking about “oh, you need to install the CA” because that’s necessary for a configured proxy as well. Chrome in particular breaks on any Google domain because they pin keys as a security measure, when using WPAD or manual system proxy settings it will happily connect. And before someone says “don’t intercept SSL”, I’ve got Sophos XG deployed on my home network to do content filtering to keep my five year old from accidentally pulling up things she shouldn’t online - she’s not at an age where she gets unsupervised access to the computer, she can’t type (or spell sometimes) properly, etc. but it lets me pull open Leapfrog Academy for her and know if she somehow managed to go to elsewhere by accident the chance of her running into age-inappropriate content is minimal.