Gently Blocking HTTPS sites

Scary for Users. Workload for Help Desks.

Users on networks with DNS-based filters blocked HTTPS sites ends up being shown a scary HTTPS certificate broken warning by the browser. This happens because the block page (hosted by the Cloud DNS provider such as Rawstream) does not have a valid SSL certificate for the blocked domain. The browser assumes that there is an evil hacker at work trying to intercept accept access to the domain.

This is alarming for users and generates needless tech support calls to helpdesk.

NXDomain---Your-Connection-is-not-private-certificate-error

 

NXDomain it instead.

We cannot get around the problem of not having SSL certificates, but we can do something about the scary browser warning page. From today, when a user attempts to access a blocked HTTPS page they will get an NXDOMAIN error instead of being directed to our block page.

NXDOMAIN means domain does not exist – an error which the browsers can understand and does not result in showing scary alerts.

This is a small change, but one we hope helps IT admins and improves the experience of end-users.

Related posts

Should Coffee Shops Filter Their Patrons’ Wifi?

Should Coffee Shops Filter Their Patrons' Wifi?

How establishments can protect their brand and block harmful internet content from being accessed through guest WiFi Coffee shops, kid-friendly restaurants and shopping malls attract lots of young families. With hundreds of kids and teenagers all connecting to the establishment’s guest wifi...

Stranger, meet WiFi

Stranger, meet WiFi

The not-so-sexy risks of having unprotected Airbnb networks A solid Wifi connection is now considered essential by most guests looking for a short-term rental on Airbnb.  Most hosts, especially in cities, will find that their booking requests drop dramatically if internet is not included...

New: Bandwidth Monitoring

Rawstream for Windows now tracks users' bandwidth usage. Reporting usage in real-time, the new Bandwidth report charts total bandwidth on a daily basis as well as the top categories for the chosen day. You can drill down further: click on a category to bring up per-user bandwidth...