diff options
| author | rofl0r <retnyg@gmx.net> | 2017-11-04 16:01:59 +0000 |
|---|---|---|
| committer | Michael Adam <obnox@samba.org> | 2017-11-16 01:08:08 +0100 |
| commit | 5062b78740285b16a9d37ead23c8d6baa3db8ac4 (patch) | |
| tree | 08c3770c3e3593835308c60b9dea12ba80530e52 | |
| parent | caf0ff3be8d9e6dac936b806e162c02d6c12ec1c (diff) | |
tinyproxy.conf.in: default to allow CONNECT method more broadly
tinyproxy conservatively defaulted to allow CONNECT method only
on two ports used by SSL in the ancient past, but since HTTPS usage
got much more widespread (actually, it's now the default for the
majority of websites), it makes sense now to allow it without
restriction by default to accomodate for the new situation.
| -rw-r--r-- | etc/tinyproxy.conf.in | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/tinyproxy.conf.in b/etc/tinyproxy.conf.in index e24ad4a..2cde69e 100644 --- a/etc/tinyproxy.conf.in +++ b/etc/tinyproxy.conf.in @@ -283,12 +283,12 @@ ViaProxyName "tinyproxy" # ConnectPort: This is a list of ports allowed by tinyproxy when the # CONNECT method is used. To disable the CONNECT method altogether, set # the value to 0. If no ConnectPort line is found, all ports are -# allowed (which is not very secure.) +# allowed. # # The following two ports are used by SSL. # -ConnectPort 443 -ConnectPort 563 +#ConnectPort 443 +#ConnectPort 563 # # Configure one or more ReversePath directives to enable reverse proxy |