hege wrote:
Isn't that a bit too paranoid.. what are you using for error pages? Do you fake viruses as Squid error page? Why don't you use Squid sandwich then, it should remove HAVP headers?
I know it is a little bit paranoid, but I made worse experiences which revealing too much information. The error pages of HAVP have been redesigned,
but no traces indicate HAVP. A Squid-sandwich just to remove the VIA-Header is overkill. I removed the corresponding line in the surce-code of HAVP,
but I'd wish to had this configureable.
hege wrote:
For your pleasure, I will lowercase Keep-Alive so it will be identical to Squid (you can easily change this yourself, grep Keep-Alive httphandler.cpp). There is nothing else you can do. Connection-header is sent between Client<->Proxy and Proxy<->Server, NOT Client->Proxy->Server.
I'm aware that a proxy must not re-transmit the connection-value, so that's goo now. However, the Via-header would be much more important.
Looking at the case of the connection-value is really paranoid
Bye,
John