zlacker

>>codero+(OP)
The long-term solution is simply not to work anywhere that insists on running a MITM attack on all of your communications.

>>db48x+D2
Isn't MITM required in enterprise environments where they want to filter content? Unless you want to run it client-side which isn't usually an option.

>>Viper0+U2
Basic filtering can be done via passively inspecting SNI headers and terminating connections to verboten hosts. However, that's not enough for some orgs, and some software works around it: https://www.bamsoftware.com/papers/fronting/

>>discre+m4
Even simple tls handshake filtering is broken with BlueCoat's implementation.