Pascal Jürgens

@Jmmx1237 pardon my interruption. I've subscribed to issues from sslsplit and thus get mails for every message here. That unfortunately means that all your questions here steal a lot of...

Just to add, downgrading should work if you just block 443/udp - clients will fail over to https/tcp

@daMatz Disclaimer: I haven't investigated this extensively. Handling connection failures is generally clients' responsibility (so has nothing to do with the server). This means that when you block UDP, browsers...

I'd be very interested in your results, so if you could drop a quick comment - even with a rough impression - that would be great!

Many thanks for looking at this, @0x501D ! As mentioned in the PR, I barely know that null pointer dereferencing and the like exist, so I can't help, as much...

That makes sense; if it's possible to reduce the per-connection overhead then that would obviously be a good thing. I haven't tested performance with hundreds or thousands of passsites (so...

Just a small update on this. I've since switched from a simple lookup to suffix matching similar to [this code](https://codereview.stackexchange.com/a/54726). This allows the whitelisting to work on TLD level if...

Hi @sonertari, (The usual preamble: This is not an "issue", I don't have an issue with the project and am instead hevily indebted, as all users are, to your continuous...

You're absolutely right @sonertari, Google has incredibly long CNs - and they span basically all of their essential services! So you will be able to match i.e. youtube domains being...

Hey @goodboy, thanks for the awesome reply! I'll try to set aside some time to see how it runs on mac and report back, but that's probably going to have...