Counterpoint: The sole purpose of a business network is to execute the requirements of the business. Any extraneous activity on the network is at least noise, a

Counterpoint: The sole purpose of a business network is to execute the requirements of the business. Any extraneous activity on the network is at least noise, and at most a direct threat to the business. The #1 way in which networks get infected is through phishing and employee downloads. On a corporate network, it can make total sense to block non-business sites by default. As someone who used to help manage the proxies at a bank, some of the arbitrary decisions annoyed me (like blocking gTLDs of all sorts by default) but at the end of the day, it was an inconvenience. There were mechanisms to request access if needed. To me, it starts to get more shady with behavioral analytics software on terminals that measure your known patterns of access and look for aberrations. It becomes intrusive and creepy in its move from "passive" filtering to active, personalized monitoring. --- All that is irrelevant here, because an ISP fucking with my TLS connection and throwing up warnings is awful.