Whitetrash 0.2 RC1

Whitetrash is a user-friendly and sysadmin-friendly proxy that makes it significantly harder for malware to use HTTP and SSL for:
- initial compromise;
- data exfiltration; and
- command and control.
Main features:
- Provides whitelisting for HTTP and SSL that is good for both users and sysadmins, but defends against malware and browser exploits.
- A HTML rendered whitelist report that can be viewed by all users. Can also be used to generate static whitelists for popular domains.
- Fast: no noticeable impact on users browsing urls already in the whitelist, and adding a new URL is very quick.
- Secure: As this is a security product, great care has been taken to sanitise input, flow control etc. so that the whitelist cannot be easily circumvented or exploited.
- Users can delete their own whitelist entries (optional). Admins can delete any whitelist entry.
- A HTML report that lists all domains requested but not whitelisted - good for tracking down malware/adware and generating static blacklists.
- Configurable authentication: any sort of authentication can be used. Squid provides plugins for NTLM, basic, and digest but has an extensible interface for other authentication schemes.
Enhancements:
- This release adds a number of new features.
- Users can now delete their own whitelist entries and admins can delete any whitelist entry.
- A new HTML report is available that lists all domains requested but not whitelisted; this is good for tracking down malware/adware and generating static blacklists.
- More statistics on domains are available, including hit counts and last visited time stamps.
- Any authentication mechanism supported by Squid can now be used.
- Squid provides plugins for NTLM, basic, and digest, but has an extensible interface for other authentication schemes.