Re: proxy_auth & wccp

proxy authentication is only possible when the browser talks to a proxy.
Not when a proxy hijacks the browsers attemtps to talk to the origin
server. This is a sound security limitation in the HTTP protocol to
ensure that origin servers does not steal the users proxy password.

--
Henrik Nordstrom
Squidh acker
Reynald I. Ngo wrote:
> 
> Everyone,
> 
>         We're implementing WCCP.  I've configured squid to authenticate a lists of
> ip addresses to pass through proxy_auth.  The problem is, those who didn't
> specify a proxy setting on thier browsers (going through wccp) isn't
> authenticated... but if we set a proxy setting... authentication is
> presented.  What seems to be causing this?
> 
> ---
> Reynald I. Ngo
> Express Internet, Inc.
> Express Telecoms Co., Inc.
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html