<pre style='margin:0'>
Renee Otten (reneeotten) pushed a commit to branch master
in repository macports-ports.
</pre>
<p><a href="https://github.com/macports/macports-ports/commit/8bc65f7fd61a11aab515ee6fb2f6c11d19ce68e9">https://github.com/macports/macports-ports/commit/8bc65f7fd61a11aab515ee6fb2f6c11d19ce68e9</a></p>
<pre style="white-space: pre; background: #F8F8F8">The following commit(s) were added to refs/heads/master by this push:
<span style='display:block; white-space:pre;color:#404040;'> new 8bc65f7fd61 privoxy: Bugfixes
</span>8bc65f7fd61 is described below
<span style='display:block; white-space:pre;color:#808000;'>commit 8bc65f7fd61a11aab515ee6fb2f6c11d19ce68e9
</span>Author: Steven Thomas Smith <s.t.smith@ieee.org>
AuthorDate: Fri Dec 17 10:31:27 2021 -0500
<span style='display:block; white-space:pre;color:#404040;'> privoxy: Bugfixes
</span><span style='display:block; white-space:pre;color:#404040;'>
</span><span style='display:block; white-space:pre;color:#404040;'> * Fixes: https://trac.macports.org/ticket/64079
</span><span style='display:block; white-space:pre;color:#404040;'> * Fix man page paths
</span>---
www/privoxy/Portfile | 40 ++++---
www/privoxy/files/patch-match-all.action.diff | 152 +++++++++++++++++++++++---
2 files changed, 161 insertions(+), 31 deletions(-)
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/www/privoxy/Portfile b/www/privoxy/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index 3a77a521741..6c50c5ed64e 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/www/privoxy/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/www/privoxy/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -6,7 +6,7 @@ PortGroup perl5 1.0
</span>
name privoxy
version 3.0.33
<span style='display:block; white-space:pre;background:#ffe0e0;'>-revision 0
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+revision 1
</span> categories www security net
platforms darwin
license GPL-2
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -24,10 +24,10 @@ long_description Privoxy is a web proxy with advanced filtering \
</span> multi-user networks.
homepage https://www.privoxy.org/
<span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span> master_sites ${homepage}/sf-download-mirror/Sources/${version}%20%28stable%29
distname ${name}-${version}-stable-src
distfiles ${distname}${extract.suffix}
<span style='display:block; white-space:pre;background:#ffe0e0;'>-
</span> extract.only ${distname}${extract.suffix}
checksums ${distname}${extract.suffix} \
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -53,10 +53,12 @@ if {[option gpg_verify.use_gpg_verification]} {
</span> }
}
<span style='display:block; white-space:pre;background:#ffe0e0;'>-worksrcdir ${name}-${version}-stable
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+set perl5_major_min 5.28
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+if {${perl5.major} eq "" || ${perl5.major} < ${perl5_major_min}} {
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ perl5.major ${perl5_major_min}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+}
</span>
<span style='display:block; white-space:pre;background:#ffe0e0;'>-depends_build-append \
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>- port:p${perl5.major}-sgmlspm
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+worksrcdir ${name}-${version}-stable
</span>
depends_lib-append port:brotli \
port:pcre \
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -119,9 +121,12 @@ post-configure {
</span> file delete ${workpath}/.CC_PRINT_OPTIONS
}
<span style='display:block; white-space:pre;background:#ffe0e0;'>-# man page
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# man page; reinplace paths for stability across version updates
</span> post-build {
<span style='display:block; white-space:pre;background:#ffe0e0;'>- system -W ${worksrcpath} "${build.cmd} dok-release"
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ reinplace -E "s#(\\\\fI)((/(etc|var|log))+/privoxy(/\[-.*\[:alnum:]]*)*\\\\fR)#\\1${prefix}\\2#g" \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ ${worksrcpath}/${name}.8
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ reinplace -E "s#(\\\\fI)/usr((/\[-.*\[:alnum:]]*)*/privoxy(/\[-.*\[:alnum:]]*)*\\\\fR)#\\1${prefix}\\2#g" \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ ${worksrcpath}/${name}.8
</span> }
destroot.keepdirs ${destroot}${prefix}/var/log/${name} \
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -414,8 +419,12 @@ TLS_PRIVOXY_ROOT_CA
</span> }
}
<span style='display:block; white-space:pre;background:#ffe0e0;'>- notes "Configure HTTPS inspection by creating a local Privoxy \
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-certificate authority (CA). As sudo:
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ notes \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ "Edit ${prefix}/etc/${name}/match-all.action to specify\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ which domains will use https-inspection.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ Configure HTTPS inspection by creating a local Privoxy\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ certificate authority (CA). As sudo:
</span>
cp -R ${prefix}/etc/${name}/ca.macports ca.hostname && cd ca.hostname
# edit openssl.cnf for your local organizationName, commonName, etc.
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -424,7 +433,8 @@ certificate authority (CA). As sudo:
</span> # avoid passphrases with '#' as the passphrase is set in config
sf-pwgen --algorithm memorable --count 2 --length 24 2>/dev/null \\
| paste -s -d -- '-' 1> private/passphrase.txt
<span style='display:block; white-space:pre;background:#ffe0e0;'>- cat private/passphrase.txt private/passphrase.txt > private/passphrase-dbl.txt \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ cat private/passphrase.txt private/passphrase.txt \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ > private/passphrase-dbl.txt \\
</span> && mv private/passphrase-dbl.txt private/passphrase.txt \\
|| rm -f private/passphrase-dbl.txt
chmod go-rwx private/passphrase.txt
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -435,21 +445,23 @@ certificate authority (CA). As sudo:
</span> -pass file:private/passphrase.txt
# private key (RSA)
<span style='display:block; white-space:pre;background:#ffe0e0;'>- # openssl genpkey -out private/ca.key.pem -algorithm RSA \
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>- # -pkeyopt rsa_keygen_bits:2048 -aes256 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # openssl genpkey -out private/ca.key.pem -algorithm RSA \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ # -pkeyopt rsa_keygen_bits:2048 -aes256 \\
</span> # -pass file:private/passphrase.txt
# Certificate PEM, DER, and P12
openssl req -config openssl.cnf -new -x509 -days 3650 -sha256 \\
-extensions v3_ca -out certs/ca.cert.pem \\
<span style='display:block; white-space:pre;background:#ffe0e0;'>- -key private/ca.key.pem -passin file:private/passphrase.txt -batch
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ -key private/ca.key.pem -passin file:private/passphrase.txt \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ -batch
</span> openssl verify -CAfile certs/ca.cert.pem certs/ca.cert.pem
openssl x509 -outform der -in certs/ca.cert.pem -out certs/ca.cer
openssl pkcs12 -export -out certs/ca.p12 -inkey private/ca.key.pem \\
-in certs/ca.cert.pem -passin file:private/passphrase.txt \\
-passout file:private/passphrase.txt
# verify .p12 passphrase
<span style='display:block; white-space:pre;background:#ffe0e0;'>- openssl pkcs12 -noout -in certs/ca.p12 -passin file:private/passphrase.txt
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ openssl pkcs12 -noout -in certs/ca.p12 \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ -passin file:private/passphrase.txt
</span>
# Install the Privoxy PKI
cp -p private/ca.key.pem certs/ca.cert.pem certs/ca.cer certs/ca.p12 \\
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/www/privoxy/files/patch-match-all.action.diff b/www/privoxy/files/patch-match-all.action.diff
</span><span style='display:block; white-space:pre;color:#808080;'>index 0b4244bfc17..96155420d81 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/www/privoxy/files/patch-match-all.action.diff
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/www/privoxy/files/patch-match-all.action.diff
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -1,6 +1,6 @@
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>---- ./match-all.action 2021-11-11 06:37:40.000000000 -0500
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+++ ./match-all.action 2021-11-11 06:58:40.000000000 -0500
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-@@ -5,12 +5,74 @@
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+--- ./match-all.action 2021-12-17 08:07:00.000000000 -0500
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++++ ./match-all.action 2021-12-17 08:01:54.000000000 -0500
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+@@ -5,12 +5,192 @@
</span> # users should only edit this file through the actions file editor.
#
#############################################################################
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -37,7 +37,7 @@
</span> +# See http://www.christianschenk.org/blog/enhancing-your-privacy-using-squid-and-privoxy/
+#{ \
+#+hide-referrer{conditional-forge} \
<span style='display:block; white-space:pre;background:#ffe0e0;'>-+#+hide-user-agent{Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15} \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++#+hide-user-agent{Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15} \
</span> +#}
+#/ # Match all URLs
+
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -46,35 +46,153 @@
</span> +/ # Match all URLs
+
+# No HTTPS Inspection on these websites
<span style='display:block; white-space:pre;background:#e0ffe0;'>++# These may be overruled by subsequent actions files
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span> +# Please edit this list to exclude domains for which HTTPS inspection
+# will not be used, whether because you wish to maintain end-to-end
+# encryption (e.g. financial institutions), avoid possible fragility
+# of important connections (e.g. Apple domains on macOS and iOS devices),
+# fix websites broken by HTTPS inspection or Privoxy rules, or any other reason
<span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Amazon domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.amazon.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.media-amazon.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.amazonaws.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.ssl-images-amazon.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# App domains, including possible dual-purpose versioning and telemetry
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.tomtom.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.split.io
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Apple domains
</span> +{-https-inspection}
+.apple.com
<span style='display:block; white-space:pre;background:#ffe0e0;'>-+.icloud.com
</span> +.cdn-apple.com
+*apple.com.akadns.net
<span style='display:block; white-space:pre;background:#e0ffe0;'>++.origin-apple.com.akadns.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.apple-dns.net
</span> +.apple.com.edgekey.net
<span style='display:block; white-space:pre;background:#e0ffe0;'>++.icloud.com
</span> +icloud-content.com
+.icloud-content.com
<span style='display:block; white-space:pre;background:#ffe0e0;'>-+.origin-apple.com.akadns.net
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+.apple-dns.net
</span> +mzstatic.com
+.mzstatic.com
<span style='display:block; white-space:pre;background:#ffe0e0;'>-+.entrust.net
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+.digicert.com
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+.verisign.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Charitible and Volunteering domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# {-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Cloud domains (various)
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.dropbox.com
</span> +.duckduckgo.com
<span style='display:block; white-space:pre;background:#ffe0e0;'>-+.duosecurity.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.adobesign.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.login.yahoo.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# e-Commerce domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.ebay.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.paypal.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.redfin.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.cdn-redfin.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Educational domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.pbs.org
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.powerschool.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.schoology.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.wikimedia.org
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.wikipedia.org
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Financial-related domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.fidelity.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.fisglobal.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.ibanking-services.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.myaccountaccess.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.vanguard.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++vgi529.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.vgi529.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.wageworks.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Google domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++accounts.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++chat.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.client-channel.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.cloud.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.docs.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++groups.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++mail.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++ogs.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++play.google.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.googleapis.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.googleusercontent.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.googlevideo.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++www.gstatic.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.youtube.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++accounts.youtube.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# ISP and Mobile and Mobile App domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.pabs.comcast.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.cloudtv.comcast.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.xfinity.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Mailing List domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# {-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Media domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++img.buzzfeed.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++pixiedust.buzzfeed.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.epg.geniatech.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++services.geniatech.eu
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++cdn.jwplayer.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.usabilla.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Microsoft domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.live.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.aria.microsoft.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.office.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.microsoft.us
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.office365.us
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Netflix domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.nflxso.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.nflxvideo.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Open Source and Software domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span> +github.com
+.github.com
+.githubassets.com
+.githubusercontent.com
<span style='display:block; white-space:pre;background:#ffe0e0;'>-+.fidelity.com
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+.myaccountaccess.com
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+.nflxvideo.net
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+.nflxso.net
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+.pbs.org
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-+.vanguard.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.jetbrains.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.macports.org
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.pypi.org
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++sourceforge.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.sourceforge.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# PKI and 2FA domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.digicert.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.duosecurity.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.entrust.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.s1gov.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.verisign.net
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Twitter domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.twimg.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Zoom domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++{-https-inspection}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.zoomgov.com
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++.zoom.us
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# Personal domains
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>++# {-https-inspection}
</span></pre><pre style='margin:0'>
</pre>