Hacker News Reader

Comment by lolinder | Hacker News Reader

From what I can tell, most operating systems will now ping their own version of neverssl as you connect to a network to find out whether they need to show you a login prompt. It looks like they basically just check to see if they get the content they expect from a domain they own, and if not they serve you that page so you can see whatever it is your network injected. (You can usually see the OS domain in the address bar.)

View on HN

Annoyingly, I've seen some networks that try to "fix" problems by letting that go through even when not logged in. I'm pretty sure it had been fixed last time I flew, but Qantas in-flight WiFi used to be one example I'd seen. You'd connect, and then nothing would happen and no SSL connections would work. You'd either need a non-HTTPs site to get the redirect, or go to 'wifi.qantas.com' to accept the terms and conditions before you could browse. I was trying to work out why my iPhone and Mac weren't popping up that page as soon as I connected, and bizarrely captive.apple.com came up with 'Success' instead of redirecting, which means they must have misguidedly put in an explicit rule to let that through, completely breaking the feature!

This exact thing happened to me on an American Airlines flight one time. It seemed to get fixed later.

The Qantas system runs on ViaSat's platform and satellite network, I don't know what American uses but perhaps it's based on the same system.

Yes, google, apple and Microsoft all maintain their own httpd with tiny stub content on it which specifically is not tls.

So interesting! Thanks for sharing.

Ah, that's interesting. I remember it being very broken for a long time...especially for "normal" users that wouldn't understand why navigating to an https site wouldn't work in that captive wifi situation.

captive.apple.com is what Apple uses

Thanks. I was reaching for an example but don't have a guest WiFi nearby to test.

Apple has at least ten or more of these I’ve seen - on badly configured networks you sometimes see it in the address bar - because cached responses could destroy the utility.

can you name one or two? I've never seen anything else besides captive.apple.com

I found https://community.ui.com/questions/Apple-iPhone-iOS-portals-... which lists some of these domains (www.itools.info, www.thinkdifferent.us, etc.), and this answer on StackOverflow -- https://stackoverflow.com/a/22277933/ -- which reverses a list of domains that all point to the same IP

I’ve seen some of these but I swear I’ve seen others like portalcheck or something - but always to an Apple-like domain.

Now I realize that the "subdomain" can change - it's been like portal.icloud.us or similar.

Google's is http://connectivitycheck.gstatic.com/, and Microsoft's is http://www.msftncsi.com/ncsi.txt

Leave it to Microsoft to use cryptic abbreviations and character limits even in URLs…

Alternatively there's http://www.msftconnecttest.com/ncsi.txt

Firefox uses http://detectportal.firefox.com/success.txt

I was always wondering given that firefox has that detectportal.firefox.com why they also put requests into example.com/example.org?

Reply on news.ycombinator.com