Hacker News Reader

example.org works well

I think he wants to make sure they do this at the DNS level.

No, you just need something without HTTPS so the intercepting proxy doesn't fail a certificate check.