1

I need to block access to certain pages on a website using regular expression and/or wildcard. The site uses https and therefore cannot be blocked using regular parental control filters (this is because you can either block all https traffic or allow them but you cannot allow only certain URLs on a specific domain because the traffic is encrypted).

Is there any way to block specific URLs on a https site (with regex / wildcard) while allowing others?

Improve this question
7
  • from the server's perspective or the browser's perspective?
    – schroeder ♦
    Commented May 22, 2015 at 20:58
  • What do you mean the server perspective?
    – Keng Kolk
    Commented May 22, 2015 at 21:03
  • do you want to block users from reaching certain pages on your server, or do you want to prevent your browser from accessing pages on someone else's server?
    – schroeder ♦
    Commented May 22, 2015 at 21:05
  • Does that answer your question?
    – ckujau
    Commented May 22, 2015 at 21:05
  • ah - I assume this is related to your other question? We need more context in order to help you.
    – schroeder ♦
    Commented May 22, 2015 at 21:11

1 Answer 1

Reset to default
-1

Only intermediate entities (firewalls) can't see the https URLs, the remote server and your browser obviously can.

If it is a parental control system, maybe you don't need to defend against a highly sophisticated attack (here "highly sophisticated" == "can uninstall browser plugins").

There are numerous plugins for the task (example). Some of them has also a functionality to make its removal much harder.

Next to that, although you can't block an URL from an intermediate entity, but you can block whole sites. The name of the used virtualhost is visible, cleartext-transmitted since some years in the TLS protocol.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .