Future of filtering

[Opendium_Steve]

Note that TLS 1.3 isn't *necessarily* a problem in its own right. The issue with TLS 1.3 is that it optionally allows SNI encryption - software that doesn't make use of that option will be fine, and there are a few work-arounds for software that does use SNI encryption.

 

The real killer is doing both SNI encryption and DNS-over-HTTPS to third party servers at the same time. But indications are that most DNS-over-HTTPS implementations are going to default to your local DNS-over-HTTPS server rather than a third party one.

[Brimstone]

Been waiting for that to drop

 

Really wish Apple would open up iOS to ATP.

 

That's down to MS making a product that works with iOS not Apple.

[psydii]

That's down to MS making a product that works with iOS not Apple.

 

Apple do not allow access to the APIs necessary for AV / Network Protection / Web filtering products to work effectively.

[mavhc]

China's filtering system is now blocking TLS 1.3 + SNI encryption