Captivating HTTPS calls

[yuvadm]

HTTPS calls are getting significantly harder to 'captivate'. This means users who attempt to negotiate an SSL/TLS connection cannot be redirected to the captive portal.

To do that, first, we need to mitm the HTTPS request and attempt to downgrade it to HTTP where we can happily do anything we want. But, this doesn't work on websites that have HSTS headers set, or for apps/browsers that have certain certificates pinned.

We can probably do an 80/20 effort here, any thoughts on the subject are much appreciated.