3 ms·
This doesn't help in their case. To get a caching node located in rural Uganda (so they don't have to max out their slow sat link), they'd have to negotiate a s
by slrz 8y ago
This doesn't help in their case. To get a caching node located in rural Uganda (so they don't have to max out their slow sat link), they'd have to negotiate a solution with each major CDN service. Before widespread HTTPS, they just put some box running Squid in the closet.
Their problem is a real one, and I don't think we have a good solution for solving it.
It'd be nice if their problems could be solved without requiring gross hacks or degraded security.
- zaarn 8y agoYou don't need to negotiate with the CDN. Squid supports HTTPS caching, the TLS connection is terminated at the proxy and the client gets a cert from a locally trusted CA. This is not very trivial to configure but the Squid Wiki should get you through it.
- milankragujevic 8y agoHi, care to point me to instructions to configure a recent Squid on a recent Ubuntu server i.e 18.04.1? With SSL termination and proper self signed cert generation. Thanks.
- zaarn 8y agoThe squid wiki is an excellent resource that explains this sufficiently. Complementary usage of a search engine helps too.
- Spivak 8y agoSquid supports MITMing TLS so that option is still on the table.