Youtube for Schools SSL

[free780]

We currently use youtube for schools. Works well for white listing videos. The problem is that if we allow https://www.youtube.com students can bypass the white list and get to any video. Unfortunately the youtube api and apps use a ssl connection to youtube. I need to allow ssl connections to youtube without students being able to get onto any videos. We use bloxx which does not filter ssl traffic. It can block by domain. What do other people do?

[grant_girdwood]

Have you configured the SSL Intercept module on Bloxx - this will give you full HTTPS filtering.

[free780]

We use bloxx which does not filter ssl traffic

We have a older version.

[free780]

Above my pay grade I'm afraid.

[Steve21]

Any reason you don't use it without HTTPS? When we were playing with it we dropped every HTTPS connection into the water to stop any bypasses, and the basic HTTP/filtering etc still seemed to work fine.

 

But then we weren't looking at giving users individual logins etc so guessing that may affect you?

 

Steve

[tom_newton]

Google make it increasing difficult to use their service without https - also it is quite difficult to teach users that "if it doesn't work, try http".

 

If you want to do this well, you'll need a filter capable of SSL interception and header insertion.

[free780]

@Steve21

We do block https://www.youtube.com . Its a issue with youtube players and apps. And now it seems chrome on android recently. See http://www.edugeek.net/forums/internet-related-filtering-firewall/131928-youtube-education-redirect-loop.html .