>A critical problem I see that needs solving is the >Starbucks style open wifi login pages that fail to redirect when trying to visit HTTPS sites. The "fix" is

>A critical problem I see that needs solving is the >Starbucks style open wifi login pages that fail to redirect when trying to visit HTTPS sites. The "fix" is to have automatic mechanisms that query a known-http page and detect a redirect. Which is what browsers already do. If you want to build your own system or don't want the browser to do the magic use neverssl.com. > A new secure authentication system is needed for these set ups. What would that mean to have "secure authentication" here? What are the security expectations of a "click here to get internet" system? IMHO the best solution for captive portals would be to just not do them.