3 ms·
I am surprised that they haven't tried this as it would be much more affective. Network level filtering always fails because it can't see encrypted packets. T
by 7952 13y ago
I am surprised that they haven't tried this as it would be much more affective. Network level filtering always fails because it can't see encrypted packets. To prevent circumvention you need something running on the machine, at which point you may as well just run the filter on the machine. The government could have promoted officially recommended browser plugins. If parents don't know how to protect their children why not help them?
- jodrellblank 13y agoNetwork level filtering always fails because it can't see encrypted packets. Pfft, how far in the past are you living? https://www.barracuda.com/products/webfilter/features https://www.barracuda.com/products/webfilter/features SSL Inspection - Administrators can specify domains and URL categories for which SSL-encrypted traffic will be decrypted, scanned for malware and policy and then re-encrypted to the destination when deemed safe. All you do is put a trusted SSL certificate on your office computers, and the proxy device will reencrypt the traffic as coming from your trusted certificate, and the end user will not notice the difference unless they study the names in the certificate chain.
- 7952 13y agoYou need root access on the machine to add an SSL cert, meaning that the network level filter fails without maintaining control of the users machine. At that point you may as well do filtering at the client level. I think we can all agree that breaking SSL is bad.