3 ms·
"The first scenario is just very unlikely." From another perspective: I worked on the content filter for Parental Controls at Apple. My understanding is that e
by wooster 17y ago
"The first scenario is just very unlikely."
From another perspective: I worked on the content filter for Parental Controls at Apple. My understanding is that every filtering proxy product with SSL support requires the installation of an insecure certificate. That, or they do a fairly rudimentary IP or reverse-DNS based filtering (which is the route we chose for Parental Controls) for secure connections.
These vendors certainly claim to have a lot of Fortune 500 clients.
- tptacek 17y agoYou're thinking of, e.g. Bluecoat. Certainly everyone runs something like a Bluecoat. But I can't name a client that uses the feature where your end users install the Bluecoat cert so they can scrub SSL traffic. They just use IP and DNS blacklists, like you.