6 ms·
This was my immediate first thought too. A lot of subway stations got WiFi in NYC and for the one directly underneath my office I always had to load Google firs
by jc4p 10y ago
This was my immediate first thought too. A lot of subway stations got WiFi in NYC and for the one directly underneath my office I always had to load Google first to get the login portal to load. Any other websites I visit (including this one) just displayed a HSTS error instead.
- batbomb 10y agoI usually type in a random url, like askdjajrj.com
- d33 10y agoOnly works if you don't use your own DNS.
- mappu 10y ago...which only works if UDP traffic on port 53 isn't blanket-rerouted.
- scrollaway 10y agoI use cnn.com. I know they support neither ipv6 nor https, and they don't trigger firewalls.
- cpeterso 10y agoI use cnn.com too because the name is short and easy to type on my phone. Hopefully they won't switch to HTTPS any time soon. :)
- roywiggins 10y agoI use xkcd.com for this. Short safe domain, no HSTS.
- niftich 10y agoYou can use http://example.com http://example.com operated by the IANA, which is accessible though http and https. Since an auto-upgrade to https would break a considerable number of examples, and there's no compelling business need on their part to promote https-only, it's much more likely to stay available through http than just about any other website run by commercial interests.
- Nullabillity 10y agoexample.com just seems to point to localhost for me. Weird...
- toast0 10y agoPossibly you have a config somewhere that has example.com in it... Could try example.org instead?
- Nullabillity 10y agoSame thing there. Oddly enough, `dig @8.8.8.8 example.com` seems to work. No mention of it in /etc/hosts. Guess my ISP must be up to some shenanigans. :/
- cocotino 10y agoWith mine I get: Host example.com not found: 5(REFUSED)
- AntiRush 10y agohttp://http.rip http://http.rip will always be http only; it's the domain I use for this purpose.
- jevinskie 10y agoVery nice, I didn't know there was a dedicated site for "I need just HTTP" purposes. Thanks for the tidbit!
- chinathrow 10y agoActually, there is https on the site, at least with a self-signed cert. https://http.rip/ https://http.rip/
- inopinatus 10y agoI use an old and otherwise unused vanity domain hosted on a private server for this.
- monorailz 10y agoI use the biggest newspaper website in the country I am from since they don't have any TLS at all yet.
- giovannibajo1 10y agoWe must thanks the wifi alliance for not having solved this problem in 15 years while they were busy releasing broken crypto implementations.
- TD-Linux 10y agoInstead, it looks like the IETF will be the one solving it. https://datatracker.ietf.org/wg/capport/documents/ https://datatracker.ietf.org/wg/capport/documents/
- giovannibajo1 10y agoYeah. The wifi alliance track record is so bad that it's a real pity they run one of the most important protocols we have today. They are decades late on most required innovations, and when they try to design something, it's just so severely broken that requires many iterations to get to a decent status. Miracast is another example of being late and failing at producing something decent.
- atdt 10y agoYou can use the addresses that Google and Apple products use to detect captive portals. Google uses http://connectivitycheck.gstatic.com/generate_204 http://connectivitycheck.gstatic.com/generate_204. Apple uses http://captive.apple.com/hotspot-detect.html http://captive.apple.com/hotspot-detect.html and http://www.apple.com/library/test/success.html http://www.apple.com/library/test/success.html.
- chinathrow 10y agoI was pretty sure that my Android Version uses google.com for the 204 generation. Without further updates, that would break.
- icebraining 10y agoProbably not; google.com will still reply on HTTP, it's just that if you have a browser that visits the HTTPS page, it'll record a rule to never visit the HTTP version. I doubt the code doing captive portal detection supports HSTS at all, so most likely it'll still work just fine.
- chinathrow 10y agoBut that would be exactly the use case here; browse google manually and then hsts kicks in from then on. Later, I get a captive portal wifi and it uses http://www.google.com/generate_204 http://www.google.com/generate_204 and whoops, no request sent and no way for the wifi to redirect me to their login portal. Both happens in chrome hence the same browser context.
- icebraining 10y agoAh, right; I was thinking about the detection mechanism (which probably doesn't use Chrome), not the redirection.
- chinathrow 10y ago