This. When I said HTTP, I meant to include HTTPS. Intercepting HTTPS and filtering it is actually rather simple, and avoiding certificate warnings only slightl

This. When I said HTTP, I meant to include HTTPS. Intercepting HTTPS and filtering it is actually rather simple, and avoiding certificate warnings only slightly less so by deploying your own CA. You're correct that some devices may use certificate pinning to prevent me from doing this, but for those devices my solution is simple: They're denied Internet access entirely. Edit: As a manufacturer/vendor you have zero expectation of privacy from me the consumer. I bought the device, I bought the equipment that runs the network, I pay to keep the device connected to the Internet, I get the final say on which packets your app receives. Any vendor who believes otherwise is mistaken and should be named and shamed.