Re: new version trusted-proxy20 draft

On 19/02/2014 15:30, "Peter Lepeska" <bizzbyster@gmail.com<mailto:bizzbyster@gmail.com>> wrote:
Salvatore's draft has some really good ideas but it does not attempt to address #2 above, which most agreed was the sticking point on trusted proxy, which we distinguish from "secure proxy" by the fact that a trusted proxy can see https-schemed traffic in plaintext.

Actually, it looks like the extended key usage bit in the proxy certificate (http://tools.ietf.org/html/draft-loreto-httpbis-trusted-proxy20-01#section-3.1) would be a handy hook to customise the UX for this use case.