HTTPS Interception


What is it, why is it important and how does it work?

HTTPS interception encompasses several mechanisms that online safety systems or web filters use to examine encrypted internet communications. The terms "SSL interception" and "TLS interception" are sometimes also used interchangably.

Safeguarding students is incredibly important for schools. Online safety systems such as web filters are a key part of any safeguarding strategy. These systems block inappropriate material, record an audit trail and report on any concerning behaviour.

Replacing Bloxx?

If you're using a Bloxx internet filter or you're a Bloxx supplier, you'll know that on November 2nd Bloxx announced that they had been acquired by the US based content distribution company Akamai, and were withdrawing from the education sector. Whilst Bloxx will be honoring existing contracts, they have curtailed renewals and new sales have been stopped with immediate effect.

Uncertainty for schools after sale of web security firm

Bloxx logo

On November 2nd, Scottish internet and e-mail security firm Bloxx announced that they had been acquired by US based content delivery company Akamai. The company says that they will be honouring the ongoing contracts with their customers. But according to CEO Charles Sweeney "the current Bloxx product set will no longer be available for sale or refresh" and renewals will only be offered until the end of January.

In Testing: Passive HTTPS Inspection


Over the past few years, HTTPS interception has become extremely important. Without it, online safety systems are extremely limited in their ability to filter and record auditing data regarding secure websites. The way this works is relatively straight forward: the client asks the Iceni proxy to connect to a secure web site, Iceni negotiates a secure connection with the web server, copies the web server's certificate and uses it to negotiate the secure connection with the client.

America Runs out of Internet Addresses

Fibre optics
Today, the American Registry for Internet Numbers (ARIN) ran out of spare IP addresses. This is almost exactly three years after the European registry (RIPE NCC) and leaves Africa as the only region still able to freely supply addresses. From today, apart from a few exceptional cases, ISPs, data centres, etc. will be unable to get any new IPv4 addresses. What will this mean for ICT managers of British schools?

In Testing: Fine grained controls

Show users

Over the years, the Iceni's hierarchical grouping system has proved itself to be extremely flexible and easy to understand. You can read more about the group configuration system in the knowledgebase article. However, it has always been limited in how fine-grained the configuration can be - since the configuration is applied to whole groups, adjusting the configuration for a single user required a group to be created just for that user.