Best settings to filter https ?

[leecovuk]

Thanks again for that JJoe, I appreciate your effort.

Regarding YLogin, I remember looking at and setting those options; I have just looked at YLogin.txt and I am set as follows:
#$SET(YLaction=https://)(^)
$SET(YLaction=http://https.)(^)

As always with me, I will just end up confusing myself and re-treading already explained ground. I just wanted to generally check I was filtering https in the least 'annoying' way whilst doing it as effectively as possible.
For a while, for example, I recall I was wanting to use half-ssl with the understanding that filtering https through Prox using half-ssl helps avoid certificate warnings, but I was only passing http through Prox in the browser proxy settings. I forget now my reasoning for doing that, but presumably it was to try avoiding some remaining certificate warnings, and it appeared to be doing filtering of (some/all?) secure pages.

Quote:I know somebody who only filters Half-SSLed pages.

Is that what I have just described above?
Do they only route http through Prox in the browser proxy settings?
Or do you mean they only use Prox to filter secure pages and not any http? (presumably not)

Finally, should I not want to filter a certain https url, what syntax would you use in the bypass list or IncludeExclude-U.ptxt? I know IncludeExclude-U.ptxt has the following:

don't use half-SSL (if default) $SET(0=i_ssl_h:0.)

but it is the url matching expressions which consistently elude me.
If you like, let's use an example that would match both
https://subdomain.domain.com
and
https://www.subdomain.domain.com

but not

http://subdomain.domain.com
and
http://www.subdomain.domain.com

Thanks again,
Lee