CIRCLE WITH A DOT

@dtl ah yes the mavica? Those are also cool. The ion is weirder, it’s not a digital recording istr.

@dtl oooh coool. My school had one of those in 1992, it seemed like incredible witchcraft at the time.

@azonenberg @whitequark possibly that's more work to set up, but doesn't rely on the entire software stack obeying http_proxy/https_proxy env vars for success. I'd not expect 100% there, so possibly MITM would be more reliable. Plus you get find out anything bundles its own CA list...

@azonenberg @whitequark Typically if you're using HTTPS through a squid proxy or similar without some sort of MITM CA hacks you can only restrict by domain name - the hosts will CONNECT to the proxy (instead of GET, etc), the ACLs will apply to the hostname, then it's effectively plain TCP proxying at that point.