[question] If I am willing to MITM HTTPs, Akamai domains

[uklans]

[question] If I am willing to MITM HTTPs, Akamai domains

[VibroAxe]

Lancache is not suitable for mitm a non gaming cdn. The whole image is setup to aggressively cache, ignoring cache control headers and relying on the fact that he cdns currently use singular nonreusable endpoints. Any akamai domain would need to be guaranteed to be of a similar format. For what you are after you probably want a squid cache or similar as it is more designed for dynamic content

[unspec]

Akamai is a huge CDN provider. We do have a few of their domains listed under various entries in this repo, such as Blizzard, who make use of their services. We've had no need to compile a comprensive list of their domains however.

The primary use for this repo is LAN events - which are predominately BYOC (bring your own computer) affairs. Given that hundreds or thousands of people may bring their own machine that event organisers have little to no control over, HTTPS MITM is not a practical approach for most of these events. As such its not something that the maintainers of this list have put much, if any, time into investigating.

A couple of notes. Firstly you can find the previous Origin domains list in the GIT history. I have no idea if they just enabled https or changed domains entirely but that could be a place to start. Secondly in addition to the certs trusted by the OS, there could well be specific checks built into the origin client that could still prevent any attempt at MITM their SSL cert.