kTsang+

HTTPS x Google Chrome = Unblocked Sites!

Recently, I discovered that accessing HTTPS sites at school via Google Chrome essentially bypasses the school filter for websites.  I have not figured out why this occurs yet - but it appears that this exploit is working for Google Chrome only.  I’m guessing that Google has a unique way of processing HTTPS requests because when trying accessing certain HTTPS sites on Opera and Internet Explorer, certain HTTPS sites return a host unavailable error.  This “exploit” allows access to HTTPS enabled sites such as Gmail and Facebook.

Using this “exploit” does not appear to violate the policy for responsible use of technology (and the internet).  This is because the end-user may be unintentionally accessing services like Facebook and Gmail without knowledge that it would normally be blocked.  Furthermore, the end-user takes no extra effort in using “3rd party/hidden” websites to unblock sites - i.e. proxies.

The only thing from my current copy of the internet contract that I may be violating is that I’m not reporting my find.  So - here are my findings.  I might not have reported them - but I have published them.  And with some searching, I’m sure you’ll find this blog and this post :)