Re: APT do not work with Squid as a proxy because of pipelining default

[Bjørn Mork <bjorn@mork.no>]

Pierre Habouzit <madcoder@madism.org> writes:
> On Wed, May 19, 2010 at 10:42:55AM +0200, Bjørn Mork wrote:
>
>> 2) http proxy servers cannot always process pipelined requests due to
>>    the complexity this adds (complexity is always bad for security), and
>
> This is bullshit. It's *VERY* easy to "support" pipelining: parse one
> request at a time, and until you're done with a given request, you just
> stop to watch the socket/file-descriptor for reading (IOW you let the
> consecutive request live in the kernel buffers).

Yeah, you make it sound easy.  I'm sure those writing proxy servers are
just stupid.


Bjørn