Re: [AFMUG] Content filtering - Trustwave
https://www.youtube.com/watch?v=827g9r0Sqds - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Simon Westlake" To: af@afmug.com Sent: Tuesday, February 13, 2018 9:54:27 AM Subject: Re: [AFMUG] Content filtering - Trustwave HTTPS content filtering should be easy, assuming they have a database of sites to filter, and they're not doing it on the fly. For TLS <= 1.2 at least, you can use https://en.wikipedia.org/wiki/Server_Name_Indication to get the hostname that the client is attempting to connect to. Last I read, TLS 1.3 is encrypting/getting rid of SNI, which means if/when TLS 1.3 comes into play, all bets may be off. I think Procera is looking into things like machine learning and DNS inspection to try to deal with this, but it is a constant back and forth. On 2/8/2018 12:40 PM, Randy Cosby wrote: Also ask about how they filter HTTPS (i.e.: over 73% of the sites in America). https://www.engadget.com/2017/10/21/googles-annual-report-shows-more-web-traffic-is-encrypted/ From: Af [ mailto:af-boun...@afmug.com ] On Behalf Of Adam Moffett Sent: Thursday, February 8, 2018 10:33 AM To: af@afmug.com ; af@afmug.com Subject: Re: [AFMUG] Content filtering - Trustwave Thanks for the tip! I'll be sure to ask them in the engineering call next week. -- Original Message -- From: "Cassidy B. Larson" < c...@infowest.com > To: af@afmug.com Sent: 2/8/2018 11:48:11 AM Subject: Re: [AFMUG] Content filtering - Trustwave Ask them about IPv6. I’ve been asking for years. No movement, no plans. They say I can bridge v6 through it and block all v6.. but that’s not a solution. On Feb 8, 2018, at 9:30 AM, Adam Moffett < dmmoff...@gmail.com > wrote: Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for? -- Simon Westlake | CEO simon@sonar.software (702) 447-1247 https://sonar.software
Re: [AFMUG] Content filtering - Trustwave
HTTPS content filtering should be easy, assuming they have a database of sites to filter, and they're not doing it on the fly. For TLS <= 1.2 at least, you can use https://en.wikipedia.org/wiki/Server_Name_Indication to get the hostname that the client is attempting to connect to. Last I read, TLS 1.3 is encrypting/getting rid of SNI, which means if/when TLS 1.3 comes into play, all bets may be off. I think Procera is looking into things like machine learning and DNS inspection to try to deal with this, but it is a constant back and forth. On 2/8/2018 12:40 PM, Randy Cosby wrote: Also ask about how they filter HTTPS (i.e.: over 73% of the sites in America). https://www.engadget.com/2017/10/21/googles-annual-report-shows-more-web-traffic-is-encrypted/ *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Adam Moffett *Sent:* Thursday, February 8, 2018 10:33 AM *To:* af@afmug.com; af@afmug.com *Subject:* Re: [AFMUG] Content filtering - Trustwave Thanks for the tip! I'll be sure to ask them in the engineering call next week. -- Original Message -- From: "Cassidy B. Larson" mailto:c...@infowest.com>> To: af@afmug.com <mailto:af@afmug.com> Sent: 2/8/2018 11:48:11 AM Subject: Re: [AFMUG] Content filtering - Trustwave Ask them about IPv6. I’ve been asking for years. No movement, no plans. They say I can bridge v6 through it and block all v6.. but that’s not a solution. On Feb 8, 2018, at 9:30 AM, Adam Moffett mailto:dmmoff...@gmail.com>> wrote: Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for? -- Simon Westlake | CEO simon@sonar.software (702) 447-1247 https://sonar.software
Re: [AFMUG] Content filtering - Trustwave
I had to do an NDA for the Trustwave discussion, but I don't think they'd mind me saying that IPv6 support is coming in Q2 this year and that they have a solution for HTTPS traffic. I'm not entirely sure if there's a business case yet, but may be. It's not just porno, it's also anti-malware and anti-phishing. In theory somebody is paying $80/year for Norton Internet Security, and maybe that should be my money instead of Norton's. -- Original Message -- From: "Randy Cosby" To: af@afmug.com Sent: 2/8/2018 1:40:45 PM Subject: Re: [AFMUG] Content filtering - Trustwave Also ask about how they filter HTTPS (i.e.: over 73% of the sites in America). https://www.engadget.com/2017/10/21/googles-annual-report-shows-more-web-traffic-is-encrypted/ From: Af [mailto:af-boun...@afmug.com] On Behalf Of Adam Moffett Sent: Thursday, February 8, 2018 10:33 AM To:af@afmug.com; af@afmug.com Subject: Re: [AFMUG] Content filtering - Trustwave Thanks for the tip! I'll be sure to ask them in the engineering call next week. -- Original Message -- From: "Cassidy B. Larson" To: af@afmug.com Sent: 2/8/2018 11:48:11 AM Subject: Re: [AFMUG] Content filtering - Trustwave Ask them about IPv6. I’ve been asking for years. No movement, no plans. They say I can bridge v6 through it and block all v6.. but that’s not a solution. On Feb 8, 2018, at 9:30 AM, Adam Moffett wrote: Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
Re: [AFMUG] Content filtering - Trustwave
State controlling private industry? Fascinating. On Thu, Feb 8, 2018 at 11:31 AM, Sterling Jacobson wrote: > What should really happen law wise, is that the state (Utah in this case) > approve a group of content filtering companies for end users. > > Then mandate AT MOST that the ISP allow/offer at least one of those up to > customers as a certified filtering option. > > > > Again, not mandatory, but as viable options that are semi-pushed from the > ISP side, still for profit. > > > > It’s just too much and too variant to have to mandate the ISP do any kind of > filtering ‘mid-stream’ style. > > > > From: Af [mailto:af-boun...@afmug.com] On Behalf Of Adam Moffett > Sent: Thursday, February 8, 2018 9:30 AM > To: af@afmug.com > Subject: [AFMUG] Content filtering - Trustwave > > > > Unrelated to Chuck's thread, we started talking internally about offering > content filtering as a value add. > > > > An initial conversation with Trustwave seemed promising, and I'm supposed to > have a follow up to discuss tech details later. > > > > But does anybody still do this? Is there still consumer interest? How much > are/were you selling it for? > >
Re: [AFMUG] Content filtering - Trustwave
Any guesses which hardware vendors are helping craft this legislation? From: Af [mailto:af-boun...@afmug.com] On Behalf Of Sterling Jacobson Sent: Thursday, February 8, 2018 12:28 PM To: af@afmug.com Subject: Re: [AFMUG] Content filtering - Trustwave I agree, but Utah seems hell bent on doing something obtrusive. Since they can’t seem to let it go, that was my next proposal in lieu of abandoning the fruitless endeavor altogether. From: Af [mailto:af-boun...@afmug.com] On Behalf Of George Skorup Sent: Thursday, February 8, 2018 11:43 AM To: af@afmug.com <mailto:af@afmug.com> Subject: Re: [AFMUG] Content filtering - Trustwave IMO, completely 100% wrong. You don't get to come into my house or tell a private company that we don't meet your moral standards. The people can make their own damn decisions. Stop trying to legislate morality. The politicians that try this stuff are usually the ones that end up being freaks or porn addicts. Public institutions, schools, libraries, etc. yeah, filter away. That's standard here in KIllinois, too. On 2/8/2018 11:31 AM, Sterling Jacobson wrote: What should really happen law wise, is that the state (Utah in this case) approve a group of content filtering companies for end users. Then mandate AT MOST that the ISP allow/offer at least one of those up to customers as a certified filtering option. Again, not mandatory, but as viable options that are semi-pushed from the ISP side, still for profit. It’s just too much and too variant to have to mandate the ISP do any kind of filtering ‘mid-stream’ style. From: Af [mailto:af-boun...@afmug.com] On Behalf Of Adam Moffett Sent: Thursday, February 8, 2018 9:30 AM To: af@afmug.com <mailto:af@afmug.com> Subject: [AFMUG] Content filtering - Trustwave Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
Re: [AFMUG] Content filtering - Trustwave
I agree, but Utah seems hell bent on doing something obtrusive. Since they can’t seem to let it go, that was my next proposal in lieu of abandoning the fruitless endeavor altogether. From: Af [mailto:af-boun...@afmug.com] On Behalf Of George Skorup Sent: Thursday, February 8, 2018 11:43 AM To: af@afmug.com Subject: Re: [AFMUG] Content filtering - Trustwave IMO, completely 100% wrong. You don't get to come into my house or tell a private company that we don't meet your moral standards. The people can make their own damn decisions. Stop trying to legislate morality. The politicians that try this stuff are usually the ones that end up being freaks or porn addicts. Public institutions, schools, libraries, etc. yeah, filter away. That's standard here in KIllinois, too. On 2/8/2018 11:31 AM, Sterling Jacobson wrote: What should really happen law wise, is that the state (Utah in this case) approve a group of content filtering companies for end users. Then mandate AT MOST that the ISP allow/offer at least one of those up to customers as a certified filtering option. Again, not mandatory, but as viable options that are semi-pushed from the ISP side, still for profit. It’s just too much and too variant to have to mandate the ISP do any kind of filtering ‘mid-stream’ style. From: Af [mailto:af-boun...@afmug.com] On Behalf Of Adam Moffett Sent: Thursday, February 8, 2018 9:30 AM To: af@afmug.com<mailto:af@afmug.com> Subject: [AFMUG] Content filtering - Trustwave Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
Re: [AFMUG] Content filtering - Trustwave
IMO, completely 100% wrong. You don't get to come into my house or tell a private company that we don't meet your moral standards. The people can make their own damn decisions. Stop trying to legislate morality. The politicians that try this stuff are usually the ones that end up being freaks or porn addicts. Public institutions, schools, libraries, etc. yeah, filter away. That's standard here in KIllinois, too. On 2/8/2018 11:31 AM, Sterling Jacobson wrote: What should really happen law wise, is that the state (Utah in this case) approve a group of content filtering companies for end users. Then mandate AT MOST that the ISP allow/offer at least one of those up to customers as a certified filtering option. Again, not mandatory, but as viable options that are semi-pushed from the ISP side, still for profit. It’s just too much and too variant to have to mandate the ISP do any kind of filtering ‘mid-stream’ style. *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Adam Moffett *Sent:* Thursday, February 8, 2018 9:30 AM *To:* af@afmug.com *Subject:* [AFMUG] Content filtering - Trustwave Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
Re: [AFMUG] Content filtering - Trustwave
Also ask about how they filter HTTPS (i.e.: over 73% of the sites in America). https://www.engadget.com/2017/10/21/googles-annual-report-shows-more-web-traffic-is-encrypted/ From: Af [mailto:af-boun...@afmug.com] On Behalf Of Adam Moffett Sent: Thursday, February 8, 2018 10:33 AM To: af@afmug.com; af@afmug.com Subject: Re: [AFMUG] Content filtering - Trustwave Thanks for the tip! I'll be sure to ask them in the engineering call next week. -- Original Message -- From: "Cassidy B. Larson" mailto:c...@infowest.com> > To: af@afmug.com <mailto:af@afmug.com> Sent: 2/8/2018 11:48:11 AM Subject: Re: [AFMUG] Content filtering - Trustwave Ask them about IPv6. I’ve been asking for years. No movement, no plans. They say I can bridge v6 through it and block all v6.. but that’s not a solution. On Feb 8, 2018, at 9:30 AM, Adam Moffett mailto:dmmoff...@gmail.com> > wrote: Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
Re: [AFMUG] Content filtering - Trustwave
On 2/8/18 9:31 AM, Sterling Jacobson wrote: It’s just too much and too variant to have to mandate the ISP do any kind of filtering ‘mid-stream’ style. And moving everything to crypto makes that kind of filtering difficult. ISP content filtering is fast becoming a relic of the past.
Re: [AFMUG] Content filtering - Trustwave
pffft... parents. Its the governments role to raise children, not parents, where have you been? 1950? On Thu, Feb 8, 2018 at 11:38 AM, Adam Moffett wrote: > But the parents already do have the option to buy something on their own > (Net Nanny etc). > > > -- Original Message -- > From: "Sterling Jacobson" > To: "af@afmug.com" > Sent: 2/8/2018 12:31:36 PM > Subject: Re: [AFMUG] Content filtering - Trustwave > > What should really happen law wise, is that the state (Utah in this case) > approve a group of content filtering companies for end users. > > Then mandate AT MOST that the ISP allow/offer at least one of those up to > customers as a certified filtering option. > > > > Again, not mandatory, but as viable options that are semi-pushed from the > ISP side, still for profit. > > > > It’s just too much and too variant to have to mandate the ISP do any kind > of filtering ‘mid-stream’ style. > > > > *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Adam Moffett > *Sent:* Thursday, February 8, 2018 9:30 AM > *To:* af@afmug.com > *Subject:* [AFMUG] Content filtering - Trustwave > > > > Unrelated to Chuck's thread, we started talking internally about offering > content filtering as a value add. > > > > An initial conversation with Trustwave seemed promising, and I'm supposed > to have a follow up to discuss tech details later. > > > > But does anybody still do this? Is there still consumer interest? How > much are/were you selling it for? > > > >
Re: [AFMUG] Content filtering - Trustwave
But the parents already do have the option to buy something on their own (Net Nanny etc). -- Original Message -- From: "Sterling Jacobson" To: "af@afmug.com" Sent: 2/8/2018 12:31:36 PM Subject: Re: [AFMUG] Content filtering - Trustwave What should really happen law wise, is that the state (Utah in this case) approve a group of content filtering companies for end users. Then mandate AT MOST that the ISP allow/offer at least one of those up to customers as a certified filtering option. Again, not mandatory, but as viable options that are semi-pushed from the ISP side, still for profit. It’s just too much and too variant to have to mandate the ISP do any kind of filtering ‘mid-stream’ style. From: Af [mailto:af-boun...@afmug.com] On Behalf Of Adam Moffett Sent: Thursday, February 8, 2018 9:30 AM To:af@afmug.com Subject: [AFMUG] Content filtering - Trustwave Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
Re: [AFMUG] Content filtering - Trustwave
Thanks for the tip! I'll be sure to ask them in the engineering call next week. -- Original Message -- From: "Cassidy B. Larson" To: af@afmug.com Sent: 2/8/2018 11:48:11 AM Subject: Re: [AFMUG] Content filtering - Trustwave Ask them about IPv6. I’ve been asking for years. No movement, no plans. They say I can bridge v6 through it and block all v6.. but that’s not a solution. On Feb 8, 2018, at 9:30 AM, Adam Moffett wrote: Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
Re: [AFMUG] Content filtering - Trustwave
What should really happen law wise, is that the state (Utah in this case) approve a group of content filtering companies for end users. Then mandate AT MOST that the ISP allow/offer at least one of those up to customers as a certified filtering option. Again, not mandatory, but as viable options that are semi-pushed from the ISP side, still for profit. It’s just too much and too variant to have to mandate the ISP do any kind of filtering ‘mid-stream’ style. From: Af [mailto:af-boun...@afmug.com] On Behalf Of Adam Moffett Sent: Thursday, February 8, 2018 9:30 AM To: af@afmug.com Subject: [AFMUG] Content filtering - Trustwave Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
Re: [AFMUG] Content filtering - Trustwave
Ask them about IPv6. I’ve been asking for years. No movement, no plans. They say I can bridge v6 through it and block all v6.. but that’s not a solution. > On Feb 8, 2018, at 9:30 AM, Adam Moffett wrote: > > Unrelated to Chuck's thread, we started talking internally about offering > content filtering as a value add. > > An initial conversation with Trustwave seemed promising, and I'm supposed to > have a follow up to discuss tech details later. > > But does anybody still do this? Is there still consumer interest? How much > are/were you selling it for?
[AFMUG] Content filtering - Trustwave
Unrelated to Chuck's thread, we started talking internally about offering content filtering as a value add. An initial conversation with Trustwave seemed promising, and I'm supposed to have a follow up to discuss tech details later. But does anybody still do this? Is there still consumer interest? How much are/were you selling it for?
