Best settings to filter https ?

[leecovuk]

Hello again JJoe, a final thought on this has occured to me;

Were you describing above how to disable half-ssl filtering on an address, with the aim that then it would become 'full' ssl filtering?
I ask because Sidki suggested in this post:

http://prxbx.com/forums/showthread.php?t...5#pid12415

how to disable ssl filtering on a url by adding the following in the bypass list:

Match all secure pages on login.live.com: login.live.com:
Match all secure pages on the entire live.com domain: ([^/]++.|)live.com:

ie that presumably disables all ssl filtering on that address/site rather than just disabling half-ssl filtering using IncludeExclude-U.ptxt. I would imagine this is what I would need to do if I had trouble with a ssl site, rather than changing the ssl filtering method. I appreciate however that my query to you probably came across as specifically how to disable half-ssl filtering on an address/site rather than all ssl filtering on that address/site.

I'm also inclined to ask you if your reply meant that the line I quoted from IncludeExclude-U.ptxt is in fact an error:

don't use half-SSL (if default) $SET(0=i_ssl_h:0.)

but, if it's correct, I suspect I wouldn't understand the nuances of its usage anyway, compared to your description of how to use:
$SET(0=i_ssl_h:1.)
or
$SET(0=i_ssl_h:2.)

If you want however to reply on this, others reading it may find it useful.

Lee