HTTPS doesn't encrypt the domain name of the HTTP request, so you can implement domain-name-based filters on encrypted traffic. My workplace does this (as do many) to block access to sites they don't want employees visiting at work, even when those sites use HTTPS.
Re:
HTTPS doesn't encrypt the domain name of the HTTP request, so you can implement domain-name-based filters on encrypted traffic. My workplace does this (as do many) to block access to sites they don't want employees visiting at work, even when those sites use HTTPS.
Re: Heh
Sometime in the last week or two, fbi.gov started enforcing HTTPS.