Skip to content

Commit 876fb46

Browse files
committed
2025-12-04
1 parent 9bceafa commit 876fb46

9 files changed

Lines changed: 132 additions & 20 deletions

File tree

squid-users/2025-December.txt

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,3 +114,20 @@ HTH
114114

115115
/tony
116116

117+
From stu.lists at spacehopper.org Thu Dec 4 12:11:25 2025
118+
From: stu.lists at spacehopper.org (Stuart Henderson)
119+
Date: Thu, 4 Dec 2025 12:11:25 -0000 (UTC)
120+
Subject: [squid-users] MFA with squid, is it possible?
121+
References: <CABA8h=R2_LzKNDmqiJjixPOrqNu7eHPWa1P5zuExFR8U_k_iTQ@mail.gmail.com>
122+
Message-ID: <slrn10j2ujd.n4i.stu.lists@naiad.spacehopper.org>
123+
124+
On 2025-12-03, NgTech LTD <ngtech1ltd at gmail.com> wrote:
125+
> The issue with a proxy connection is that the client-to-service connection
126+
> is in plain text.
127+
128+
It doesn't have to be. Squid can listen on https for client-to-proxy
129+
connections and some (but not all) clients can use that if you specify
130+
https://proxy.example.org:portnum/ as the proxy address.
131+
132+
133+

squid-users/2025-December/027716.html

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
</style>
1414
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
1515
<LINK REL="Previous" HREF="027715.html">
16-
16+
<LINK REL="Next" HREF="027717.html">
1717
</HEAD>
1818
<BODY BGCOLOR="#ffffff">
1919
<H1>[squid-users] MFA with squid, is it possible?</H1>
@@ -25,7 +25,8 @@ <H1>[squid-users] MFA with squid, is it possible?</H1>
2525
<P><UL>
2626
<LI>Previous message (by thread): <A HREF="027715.html">[squid-users] MFA with squid, is it possible?
2727
</A></li>
28-
28+
<LI>Next message (by thread): <A HREF="027717.html">[squid-users] MFA with squid, is it possible?
29+
</A></li>
2930
<LI> <B>Messages sorted by:</B>
3031
<a href="date.html#27716">[ date ]</a>
3132
<a href="thread.html#27716">[ thread ]</a>
@@ -76,13 +77,15 @@ <H1>[squid-users] MFA with squid, is it possible?</H1>
7677
/tony
7778
</PRE>
7879

80+
7981
<!--endarticle-->
8082
<HR>
8183
<P><UL>
8284
<!--threads-->
8385
<LI>Previous message (by thread): <A HREF="027715.html">[squid-users] MFA with squid, is it possible?
8486
</A></li>
85-
87+
<LI>Next message (by thread): <A HREF="027717.html">[squid-users] MFA with squid, is it possible?
88+
</A></li>
8689
<LI> <B>Messages sorted by:</B>
8790
<a href="date.html#27716">[ date ]</a>
8891
<a href="thread.html#27716">[ thread ]</a>
Lines changed: 67 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,67 @@
1+
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2+
<HTML>
3+
<HEAD>
4+
<TITLE> [squid-users] MFA with squid, is it possible?
5+
</TITLE>
6+
<LINK REL="Index" HREF="index.html" >
7+
<LINK REL="made" HREF="mailto:squid-users%40lists.squid-cache.org?Subject=Re%3A%20%5Bsquid-users%5D%20MFA%20with%20squid%2C%20is%20it%20possible%3F&In-Reply-To=%3Cslrn10j2ujd.n4i.stu.lists%40naiad.spacehopper.org%3E">
8+
<META NAME="robots" CONTENT="index,nofollow">
9+
<style type="text/css">
10+
pre {
11+
white-space: pre-wrap; /* css-2.1, curent FF, Opera, Safari */
12+
}
13+
</style>
14+
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
15+
<LINK REL="Previous" HREF="027716.html">
16+
17+
</HEAD>
18+
<BODY BGCOLOR="#ffffff">
19+
<H1>[squid-users] MFA with squid, is it possible?</H1>
20+
<B>Stuart Henderson</B>
21+
<A HREF="mailto:squid-users%40lists.squid-cache.org?Subject=Re%3A%20%5Bsquid-users%5D%20MFA%20with%20squid%2C%20is%20it%20possible%3F&In-Reply-To=%3Cslrn10j2ujd.n4i.stu.lists%40naiad.spacehopper.org%3E"
22+
TITLE="[squid-users] MFA with squid, is it possible?">stu.lists at spacehopper.org
23+
</A><BR>
24+
<I>Thu Dec 4 12:11:25 UTC 2025</I>
25+
<P><UL>
26+
<LI>Previous message (by thread): <A HREF="027716.html">[squid-users] MFA with squid, is it possible?
27+
</A></li>
28+
29+
<LI> <B>Messages sorted by:</B>
30+
<a href="date.html#27717">[ date ]</a>
31+
<a href="thread.html#27717">[ thread ]</a>
32+
<a href="subject.html#27717">[ subject ]</a>
33+
<a href="author.html#27717">[ author ]</a>
34+
</LI>
35+
</UL>
36+
<HR>
37+
<!--beginarticle-->
38+
<PRE>On 2025-12-03, NgTech LTD &lt;<A HREF="https://lists.squid-cache.org/listinfo/squid-users">ngtech1ltd at gmail.com</A>&gt; wrote:
39+
&gt;<i> The issue with a proxy connection is that the client-to-service connection
40+
</I>&gt;<i> is in plain text.
41+
</I>
42+
It doesn't have to be. Squid can listen on https for client-to-proxy
43+
connections and some (but not all) clients can use that if you specify
44+
<A HREF="https://proxy.example.org:portnum/">https://proxy.example.org:portnum/</A> as the proxy address.
45+
46+
47+
</PRE>
48+
49+
<!--endarticle-->
50+
<HR>
51+
<P><UL>
52+
<!--threads-->
53+
<LI>Previous message (by thread): <A HREF="027716.html">[squid-users] MFA with squid, is it possible?
54+
</A></li>
55+
56+
<LI> <B>Messages sorted by:</B>
57+
<a href="date.html#27717">[ date ]</a>
58+
<a href="thread.html#27717">[ thread ]</a>
59+
<a href="subject.html#27717">[ subject ]</a>
60+
<a href="author.html#27717">[ author ]</a>
61+
</LI>
62+
</UL>
63+
64+
<hr>
65+
<a href="https://lists.squid-cache.org/listinfo/squid-users">More information about the squid-users
66+
mailing list</a><br>
67+
</body></html>

squid-users/2025-December/author.html

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,15 +19,20 @@ <h1>December 2025 Archives by author</h1>
1919
</a></b></li>
2020
</ul>
2121
<p><b>Starting:</b> <i>Wed Dec 3 03:32:07 UTC 2025</i><br>
22-
<b>Ending:</b> <i>Wed Dec 3 16:55:10 UTC 2025</i><br>
23-
<b>Messages:</b> 3<p>
22+
<b>Ending:</b> <i>Thu Dec 4 12:11:25 UTC 2025</i><br>
23+
<b>Messages:</b> 4<p>
2424
<ul>
2525

2626
<LI><A HREF="027716.html">[squid-users] MFA with squid, is it possible?
2727
</A><A NAME="27716">&nbsp;</A>
2828
<I>Tony Albers
2929
</I>
3030

31+
<LI><A HREF="027717.html">[squid-users] MFA with squid, is it possible?
32+
</A><A NAME="27717">&nbsp;</A>
33+
<I>Stuart Henderson
34+
</I>
35+
3136
<LI><A HREF="027714.html">[squid-users] CVE-2025-62168
3237
</A><A NAME="27714">&nbsp;</A>
3338
<I>Amos Jeffries
@@ -41,8 +46,8 @@ <h1>December 2025 Archives by author</h1>
4146
</ul>
4247
<p>
4348
<a name="end"><b>Last message date:</b></a>
44-
<i>Wed Dec 3 16:55:10 UTC 2025</i><br>
45-
<b>Archived on:</b> <i>Wed Dec 3 16:55:24 UTC 2025</i>
49+
<i>Thu Dec 4 12:11:25 UTC 2025</i><br>
50+
<b>Archived on:</b> <i>Thu Dec 4 12:11:36 UTC 2025</i>
4651
<p>
4752
<ul>
4853
<li> <b>Messages sorted by:</b>

squid-users/2025-December/date.html

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,8 @@ <h1>December 2025 Archives by date</h1>
1919
</a></b></li>
2020
</ul>
2121
<p><b>Starting:</b> <i>Wed Dec 3 03:32:07 UTC 2025</i><br>
22-
<b>Ending:</b> <i>Wed Dec 3 16:55:10 UTC 2025</i><br>
23-
<b>Messages:</b> 3<p>
22+
<b>Ending:</b> <i>Thu Dec 4 12:11:25 UTC 2025</i><br>
23+
<b>Messages:</b> 4<p>
2424
<ul>
2525

2626
<LI><A HREF="027714.html">[squid-users] CVE-2025-62168
@@ -36,13 +36,18 @@ <h1>December 2025 Archives by date</h1>
3636
<LI><A HREF="027716.html">[squid-users] MFA with squid, is it possible?
3737
</A><A NAME="27716">&nbsp;</A>
3838
<I>Tony Albers
39+
</I>
40+
41+
<LI><A HREF="027717.html">[squid-users] MFA with squid, is it possible?
42+
</A><A NAME="27717">&nbsp;</A>
43+
<I>Stuart Henderson
3944
</I>
4045

4146
</ul>
4247
<p>
4348
<a name="end"><b>Last message date:</b></a>
44-
<i>Wed Dec 3 16:55:10 UTC 2025</i><br>
45-
<b>Archived on:</b> <i>Wed Dec 3 16:55:24 UTC 2025</i>
49+
<i>Thu Dec 4 12:11:25 UTC 2025</i><br>
50+
<b>Archived on:</b> <i>Thu Dec 4 12:11:36 UTC 2025</i>
4651
<p>
4752
<ul>
4853
<li> <b>Messages sorted by:</b>

squid-users/2025-December/subject.html

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,8 @@ <h1>December 2025 Archives by subject</h1>
1919
</a></b></li>
2020
</ul>
2121
<p><b>Starting:</b> <i>Wed Dec 3 03:32:07 UTC 2025</i><br>
22-
<b>Ending:</b> <i>Wed Dec 3 16:55:10 UTC 2025</i><br>
23-
<b>Messages:</b> 3<p>
22+
<b>Ending:</b> <i>Thu Dec 4 12:11:25 UTC 2025</i><br>
23+
<b>Messages:</b> 4<p>
2424
<ul>
2525

2626
<LI><A HREF="027714.html">[squid-users] CVE-2025-62168
@@ -36,13 +36,18 @@ <h1>December 2025 Archives by subject</h1>
3636
<LI><A HREF="027716.html">[squid-users] MFA with squid, is it possible?
3737
</A><A NAME="27716">&nbsp;</A>
3838
<I>Tony Albers
39+
</I>
40+
41+
<LI><A HREF="027717.html">[squid-users] MFA with squid, is it possible?
42+
</A><A NAME="27717">&nbsp;</A>
43+
<I>Stuart Henderson
3944
</I>
4045

4146
</ul>
4247
<p>
4348
<a name="end"><b>Last message date:</b></a>
44-
<i>Wed Dec 3 16:55:10 UTC 2025</i><br>
45-
<b>Archived on:</b> <i>Wed Dec 3 16:55:24 UTC 2025</i>
49+
<i>Thu Dec 4 12:11:25 UTC 2025</i><br>
50+
<b>Archived on:</b> <i>Thu Dec 4 12:11:36 UTC 2025</i>
4651
<p>
4752
<ul>
4853
<li> <b>Messages sorted by:</b>

squid-users/2025-December/thread.html

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,8 @@ <h1>December 2025 Archives by thread</h1>
1919
</a></b></li>
2020
</ul>
2121
<p><b>Starting:</b> <i>Wed Dec 3 03:32:07 UTC 2025</i><br>
22-
<b>Ending:</b> <i>Wed Dec 3 16:55:10 UTC 2025</i><br>
23-
<b>Messages:</b> 3<p>
22+
<b>Ending:</b> <i>Thu Dec 4 12:11:25 UTC 2025</i><br>
23+
<b>Messages:</b> 4<p>
2424
<ul>
2525

2626
<!--0 01764732727.27714- -->
@@ -42,12 +42,18 @@ <h1>December 2025 Archives by thread</h1>
4242
<I>Tony Albers
4343
</I>
4444

45+
<!--1 01764768706.27715-01764850285.27717- -->
46+
<LI><A HREF="027717.html">[squid-users] MFA with squid, is it possible?
47+
</A><A NAME="27717">&nbsp;</A>
48+
<I>Stuart Henderson
49+
</I>
50+
4551
</UL>
4652
</ul>
4753
<p>
4854
<a name="end"><b>Last message date:</b></a>
49-
<i>Wed Dec 3 16:55:10 UTC 2025</i><br>
50-
<b>Archived on:</b> <i>Wed Dec 3 16:55:24 UTC 2025</i>
55+
<i>Thu Dec 4 12:11:25 UTC 2025</i><br>
56+
<b>Archived on:</b> <i>Thu Dec 4 12:11:36 UTC 2025</i>
5157
<p>
5258
<ul>
5359
<li> <b>Messages sorted by:</b>
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
<tt>
2+
&lt;div&nbsp;dir=&quot;ltr&quot;&gt;&lt;div&gt;I&nbsp;was&nbsp;wondering&nbsp;if&nbsp;it&#39;s&nbsp;possible&nbsp;to&nbsp;use&nbsp;2fa&nbsp;with&nbsp;squid?&lt;br&gt;If&nbsp;so,&nbsp;how?&lt;br&gt;&lt;/div&gt;&lt;div&gt;The&nbsp;authentication of&nbsp;squid&nbsp;is&nbsp;based&nbsp;on&nbsp;a&nbsp;couple&nbsp;methods,&nbsp;but,&nbsp;by&nbsp;what&nbsp;I&nbsp;can&nbsp;identify&nbsp;the&nbsp;2fa?&nbsp;Is&nbsp;there&nbsp;any&nbsp;option&nbsp;to&nbsp;use&nbsp;some&nbsp;kind&nbsp;of&nbsp;token&nbsp;which&nbsp;can&nbsp;be&nbsp;acquired via&nbsp;some&nbsp;external&nbsp;authentication&nbsp;service?&lt;br&gt;I&nbsp;am&nbsp;unsure&nbsp;if&nbsp;it&#39;s&nbsp;doable&nbsp;or&nbsp;not.&lt;br&gt;I&nbsp;have&nbsp;seen&nbsp;a&nbsp;couple&nbsp;VPN&nbsp;services&nbsp;which&nbsp;offer&nbsp;2fa,&nbsp;but&nbsp;all&nbsp;of&nbsp;these&nbsp;have&nbsp;connection&nbsp;based&nbsp;authentication.&lt;/div&gt;&lt;div&gt;&lt;br&gt;&lt;/div&gt;&lt;div&gt;The&nbsp;only&nbsp;service&nbsp;I&nbsp;have&nbsp;seen&nbsp;which&nbsp;has&nbsp;a&nbsp;nice&nbsp;concept&nbsp;of&nbsp;2fa&nbsp;is&nbsp;Defguard.&lt;/div&gt;&lt;div&gt;It&nbsp;uses&nbsp;Wireguard combined&nbsp;with&nbsp;psk.&lt;/div&gt;&lt;div&gt;The&nbsp;flow&nbsp;is&nbsp;that&nbsp;the&nbsp;app&nbsp;contacts&nbsp;a&nbsp;management service&nbsp;and&nbsp;the&nbsp;2fa&nbsp;authentication&nbsp;is&nbsp;done&nbsp;against&nbsp;this&nbsp;service.&lt;br&gt;Then&nbsp;this&nbsp;service&nbsp;generates&nbsp;the&nbsp;WG&nbsp;config&nbsp;PSK&nbsp;and&nbsp;pushes&nbsp;it&nbsp;to&nbsp;the&nbsp;WG&nbsp;service.&lt;br&gt;The&nbsp;app&nbsp;then&nbsp;connects&nbsp;with&nbsp;a&nbsp;combination&nbsp;of&nbsp;KEY+PSK.&lt;/div&gt;&lt;div&gt;The&nbsp;detection&nbsp;of&nbsp;connection&nbsp;invalidation&nbsp;(&quot;disconnection&quot;)&nbsp;is&nbsp;when&nbsp;there&nbsp;is&nbsp;no&nbsp;activity&nbsp;after&nbsp;3&nbsp;minutes&nbsp;on&nbsp;the&nbsp;WG&nbsp;peer(or&nbsp;by&nbsp;disconnection&nbsp;in&nbsp;the&nbsp;app).&lt;br&gt;Then&nbsp;the&nbsp;PSK&nbsp;is&nbsp;automatically&nbsp;being&nbsp;revoked/changed&nbsp;in&nbsp;the&nbsp;peer&nbsp;config&nbsp;which&nbsp;blocks&nbsp;it&#39;&nbsp;usage.&lt;/div&gt;&lt;div&gt;It&#39;s&nbsp;not&nbsp;a&nbsp;perfect&nbsp;solution&nbsp;but&nbsp;it&#39;s&nbsp;a&nbsp;nice&nbsp;enough&nbsp;implementation.&lt;/div&gt;&lt;div&gt;&lt;br&gt;&lt;/div&gt;&lt;div&gt;The&nbsp;issue&nbsp;with&nbsp;a&nbsp;proxy&nbsp;connection&nbsp;is&nbsp;that&nbsp;the&nbsp;client-to-service&nbsp;connection&nbsp;is&nbsp;in&nbsp;plain&nbsp;text.&lt;br&gt;So&nbsp;my&nbsp;assumption&nbsp;is&nbsp;that&nbsp;if&nbsp;we&nbsp;can&nbsp;secure&nbsp;the&nbsp;client-to-proxy&nbsp;and&nbsp;the&nbsp;generated&nbsp;config&nbsp;delivery&nbsp;to&nbsp;the&nbsp;client&nbsp;we&nbsp;can&nbsp;kind&nbsp;of&nbsp;consider&nbsp;it&nbsp;&quot;secure&nbsp;enough&quot;.&lt;br&gt;&lt;br&gt;I&nbsp;am&nbsp;wondering&nbsp;to&nbsp;myself&nbsp;about&nbsp;the&nbsp;available&nbsp;options&nbsp;in&nbsp;the&nbsp;proxy&nbsp;market.&lt;br&gt;&lt;br&gt;Thanks,&lt;br&gt;Eliezer&lt;/div&gt;&lt;div&gt;&lt;div&nbsp;dir=&quot;rtl&quot;&nbsp;class=&quot;gmail_signature&quot;&nbsp;data-smartmail=&quot;gmail_signature&quot;&gt;&lt;div&nbsp;dir=&quot;ltr&quot;&gt;&lt;/div&gt;&lt;/div&gt;&lt;/div&gt;&lt;/div&gt;<br>
3+
4+
</tt>

squid-users/index.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ <h1>The squid-users Archives </h1>
2525
<A href="2025-December/author.html">[ Author ]</a>
2626
<A href="2025-December/date.html">[ Date ]</a>
2727
</td>
28-
<td><A href="2025-December.txt">[ Text 4 KB ]</a></td>
28+
<td><A href="2025-December.txt.gz">[ Gzip'd Text 1 KB ]</a></td>
2929
</tr>
3030

3131

0 commit comments

Comments
 (0)