The 511 doesn't solve the https problem though. There's a tiny little footnote down the bottom<br><br><pre class="newpage">Also, note that captive portals using this status code on a Secure
Socket Layer (SSL) or Transport Layer Security (TLS) connection
(commonly, port 443) will generate a certificate error on the client.
</pre>Regards,<br>Chris<br><br><div class="gmail_quote">On Fri, Jul 6, 2012 at 9:37 AM, Wade Roberts <span dir="ltr"><<a href="mailto:ausnog@acquired-taste.net" target="_blank">ausnog@acquired-taste.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">While this won't help short term, RFC 6585 (<a href="http://tools.ietf.org/html/rfc6585" target="_blank">http://tools.ietf.org/html/rfc6585</a>) introduced the HTTP 511 status code: Network Authentication Required.<div>
<br></div><div>You're in a bit of a v6-esque chicken and egg for implementation, but maybe you can short circuit it somewhat by having it implemented in this environment so it just works when clients catch up.<br><div>
<span style="text-indent:0px;letter-spacing:normal;font-variant:normal;text-align:-webkit-auto;font-style:normal;font-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Helvetica;word-spacing:0px"><span style="text-indent:0px;letter-spacing:normal;font-variant:normal;text-align:-webkit-auto;font-style:normal;font-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Helvetica;word-spacing:0px"><div style="word-wrap:break-word">
<br>--</div><div style="word-wrap:break-word">Wade<br><br><br></div></span></span>
</div>
<br><div><div><div><div>On 2012-07-05, at 20:38, Skeeve Stevens wrote:</div><br></div></div><blockquote type="cite"><div><div>Hey all,<div><br></div><div>Given the discussions happening on the list at the moment and what happened with Telstra, and a particular project I am working on at the moment, I thought I would seek the community's comments.</div>
<div><br></div><div>In simple terms, the project is a wireless hotspot for a particular purpose. The hotspot provides content (all legal) and after a product purchase, internet access for a period of time. All that is simple and nothing many people aren't already doing.</div>
<div><br></div><div>The issue that I've recently come up against is HTTPS. Many sites are moving to HTTPS as default. Facebook, Google, etc etc are starting to use it more and more. Now this is not a problem at all, and fully supported as normal web traffic should be.</div>
<div><br></div><div>The problem we're facing is that as per normal hotspot solutions, when a user connects to the hotspot, they get an IP. Then they start a browser, and if it goes to a home-page, it gets redirected to a captive portal page where they click some terms and we move on.</div>
<div><br></div><div>Now that many people are having a HTTPS address as their 'home/startpage/etc', the HTTPS not able to get anywhere and breaking. So to solve this issue, we now also intercept 443 - HTTPD and redirect it back to the portal.</div>
<div><br></div><div>Due to the user trying to go to <a href="https://blah.com/" target="_blank">https://blah.com/</a> being re-directed, the browser is freaking out with an interception or man-in-the-middle attack potential alert and so on. </div>
<div><br></div><div>Now, I think its possible to work our way around this, but the question remains - "Is intercepting HTTPS for redirection purposes - an interception issue" ?</div><div><br></div><div>I am sure there are lots of people who have had this problem and may (or may not) have a way around it... but the question is - is there any legal issues here we have to worry about?</div>
<div><br></div><div>Comments welcome.<br><div><div><font face="Calibri"><b><br><br></b></font></div><div><b style="font-family:Calibri;font-size:13px">Skeeve Stevens, CEO - </b><span style="font-family:Calibri;font-size:13px">eintellego Pty Ltd</span></div>
<div><div style="font-family:Calibri,sans-serif"><span style="font-size:13px;font-family:Calibri"><a href="mailto:skeeve@eintellego.net" target="_blank">skeeve@eintellego.net</a> ; <a href="http://www.eintellego.net/" target="_blank">www.eintellego.net</a></span><span style="color:rgb(127,0,127);font-size:13px"><font style="color:rgb(0,0,0)" color="#002060"><div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-family:Calibri">
Phone: 1300 753 383; Cell <a href="tel:%2B61%20%280%29414%20753%20383" value="+61414753383" target="_blank">+61 (0)414 753 383</a> ; <a>skype://skeeve</a></div><div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-family:Calibri">
<a href="http://facebook.com/eintellego" target="_blank">facebook.com/eintellego</a> ; <a href="http://twitter.com/networkceoau" target="_blank"></a><a href="http://linkedin.com/in/skeeve" target="_blank">linkedin.com/in/skeeve</a> </div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-family:Calibri"><a href="http://twitter.com/networkceoau" target="_blank">twitter.com/networkceoau</a> ; blog: <a href="http://www.network-ceo.net/" target="_blank">www.network-ceo.net</a></div>
</font></span></div>
</div><div><div style="font-family:Calibri,sans-serif"><div><span style="color:rgb(127,0,127);font-size:13px"><div><span style="color:rgb(127,0,127);font-size:13px"><img><br></span></div>
The Experts Who The Experts Call</span></div><div style="font-size:14px;color:rgb(127,0,127)"><span style="color:rgb(0,32,96);font-size:13px">Juniper - Cisco – IBM</span></div></div></div><br>
</div></div></div></div><div>
_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</div></blockquote></div><br></div></div><br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br>