In case of legal SSL interception the proxy CA which is used to issue the certificates for the intercepted connections gets explicitly imported into the browser/OS as trusted. In such a case browser will ignore both the builtin pinning and also the pinning done with HPKP header. This is explicitly done this way to make legal SSL interception (in firewalls, ...
To achieve that, you need to choose/use a Mobile Device Management (MDM) solution.
There are some solutions about MDM for Windows Phone / Windows 10 Mobile. Look:
Solutions from other companies: just do a web ...
This is just Google Chrome checking if your ISP is doing DNS hijacking. It checks if these random hostnames will resolve to some valid IP (i.e. hijacked to serve "helpful information", often with ads in it) or will be reported as unresolveable. Nothing to worry about. For more details see Chromes startup random DNS queries ... or Unusual HEAD requests to ...
Finally found the problem - of course it was firewall.
I use droplist from this tutorial and put rules iptables -I FORWARD -j droplist somewhere in the middle of rules. But this rule has to be first rule
$IPT -F nat
$IPT -A INPUT -P DROP
$IPT -A OUTPUT -P DROP
$IPT -A FORWARD -P DROP
Proxy rewrite entirely the packets, so depending of proxy's configuration, anything is possible. So, the proxy is doing the ssl connection to the server and is serving you a non-ssl webpage. Maybe is only a cached webpage. Did you try to do some searches on google? Try to search something "weird" what it's suppossed to be uncached to sse if http remains, if ...
Is there another way to get around this problem?
Yes, you can configure your SSL interception tool to delete any HPKP headers in responses.
You'll need all users to start with a dedicated browser profile, that's only ever used under SSL interception. If the same browser profile is ever used without SSL interception, the real server may pin their ...
Configuration 2 has an option specifically for a HTTP Global Proxy. You will need to get it on the Mac app store (https://itunes.apple.com/us/app/apple-configurator-2/id1037126344?mt=12).
Once you've downloaded that, create a new profile with the HTTP Global Proxy, sign it, and add it to your iDevice.
See this link for more information https://discussions....
When you're using a proxy server, it is just that a proxy. Everything will be forced to go through it, whether it is wired, wireless, 2G, 3G, 4G, LTE. The browser is configured to do the following:
phone (browser) --> go to Yahoo.com --> through this proxy (184.108.40.206)
proxy --> Internet --> I need this page
Yahoo --> Proxy <--> phone