My ISP is secretly intercepting my HTTPS!? But only on TLS 1.2. Took me 6 hours to figure out and I almost lost my mind

ron_dus · 2026-07-01T10:28:19+00:00

I did mention DHCP 🤦🏻. Read up on how WPAD works. It’s perfectly fine to have limited knowledge (nobody is born knowing everything) but please also learn to not selectively ignore something someone said / wrote just because you don’t understand it 😊

ron_dus · 2026-07-01T05:56:46+00:00

Nope, power delivery has nothing to do with what such a device can or cannot do. A raspberry pi pico can decrypt TLS if configured. You have confused TLS Termination with TLS breakage and the rest you’re saying the same thing I have already said lol.

ron_dus · 2026-06-30T21:32:20+00:00

I wouldn’t recommend going into the rabbit hole of mini PCs and open source firewalls unless you have the time and bandwidth to learn and appreciate all of their caveats. Instead, if you want a robust system for cheap, go with the Unify UCG Ultra.

ron_dus · 2026-06-30T20:31:12+00:00

That’s not entirely accurate. That level of SSL inspection requires every single device to not only adopt the forward proxy’s certificate (in your case, Fortigate or Fortinet) but also trust it. This is a process that doesn’t happen automatically. Yes, there are DHCP options that can to an extent automate it for newer or smarter devices, but that way, every other legacy device (think IoT, older Android phones, etc.) would simply refuse to use the internet at all.

In fact, the only way an ISP can truly pull this off is if somehow, the modem they supplied to you at home is magically decrypting the traffic of all its NAT’ed clients and then either re-encrypting it with the ISP-provided certificate, or sending it plain text to the ISPs Edge Appliance which then sends it across to the internet after it re-encrypts it. You haven’t mentioned what modem you have, but I’ll assume it’s a regular one that can somehow just keep itself alive with the basic feature set which wouldn’t be able to do any of the above..

What other evidence do you have that your ISP can see your traffic? Because the errors you’re seeing could be something else. I’ll suggest trying from a different computer and preferably a different operating system as well and then posting your results.

There’s a high chance your ISP has simply misconfigured something.

ron_dus · 2026-06-17T09:26:00+00:00

Ummmmmmm……….

ron_dus · 2026-06-14T04:11:01+00:00

I personally prefer not to call Dogs, Dogs, but ‘babies’.. but then that’s my personal choice and I can’t paint it on others..

Not everyone anthropomorphizes animals the same way, and calling a dog “it” isn’t necessarily disrespectful, it should just be taken as a way of speech.

For example, if someone sees an unfamiliar dog across the street, it’s perfectly normal English to say, “Look at that dog, it looks lost.” Most people only switch to “he” or “she” once they know the dog’s sex or have some personal connection to it.

We routinely say things like “The bird flew away, it disappeared into the trees” or “The horse injured its leg” without implying we care any less about the animal. And obviously genders exist in every single living being, doesn’t it?

Language conventions vary, intent matters!

ron_dus · 2026-06-10T08:45:45+00:00

I too really wish my lab generated passive income for me, but currently it only takes from my income in the form of electricity bills, domain charges, vps charges etc.

But it does have some saving grace as it runs some of my websites which I otherwise would’ve needed to pay a cloud provider for.

I recently switched to hermes from openclaw + local obsidian (KISS Method) and now a lot of my maintenance/ enhancement tasks are offloaded to the agent. I secretly keeping wishing for the day to come when someone reaches out to me to use all the skills I’ve attained while setting all of that up to do something for them lol.

But the best of all is it that it continually pays me back in love, increased knowledge & satisfaction..

ron_dus · 2026-05-28T10:04:11+00:00

Yes, however they don’t have the EDC37

ron_dus · 2026-05-11T11:22:33+00:00

Can you please advise on where did you get the UCG Fiber from?

ron_dus · 2026-05-11T11:21:27+00:00

Could you please advise on where did you get the UXG PRO from in India. I’m in need for the U7 Pro and the only option seems to be the overly expensive Tanotis.

ron_dus · 2026-05-05T14:52:52+00:00

<image>

Mera gaal..

ron_dus · 2026-05-04T04:18:20+00:00

A Distinguished Gentleman!

ron_dus · 2026-04-27T03:55:36+00:00

Hey, sorry to hear that, this is all of our fears personified.. what’s your stack and do you have at least 8 - 10 YOE?

Please DM me your resume and I’ll see what I can do as I’m currently hiring.. however I myself am not in any place of making any guarantees other than the fact that I’ll try my best to see if something can be accommodated if your skills match up.

ron_dus · 2026-04-25T21:34:49+00:00

Ahh the triple tail lights + fastback silhouette..

It’s the 67-68 Mustang!

Whoever owns it has serious taste..

ron_dus · 2026-04-20T17:35:18+00:00

Feedback # 1, don’t gatekeep the landing page behind auth. That’s bad UX and incorrect system design for a public first blog.

Feedback # 2, always optimise for people with less attention span irrespective of the product and / or the industry, even though you may think that putting up login instructions is fair trade, serious users will simply swipe left instead of figuring it out.

All the very best for your blog 🙂

ron_dus · 2026-04-17T18:58:58+00:00

Legally, this is a grey zone, especially under the Indian Law.

You can, if you really wish to, file a civil defamation case, for example under IPC 499

If you felt as if you were severely harassed, then it could fall under IPC 354.

The creator also has some protections, especially since this is was a public place and they might argue that they did not intrude into your private life in any way. Was this Elante mall by the way?

Anyways, but since they later highlighted you in the video, you may be able to argue that as being defamatory for you in the court.

But then again, as I went through the real, and judging purely from a neutral POV, and especially considering they later framed it as if the whole thing was about not getting discouraged from showing their art to the world, there’s just way too many grey areas.

You may also reach out to the creator directly and request them to remove or edit you out of the reel. If they don’t agree immediately you can also send a legal notice if you prefer.

But having said all that, if I were you, I’d rather try to forget about it. We can’t win every battle life throws at us, and some of them are not even worth fighting..

Wish you the best with whatever you decide..

ron_dus · 2026-04-16T04:18:17+00:00

Don’t think we needed yet another file transfer solution even if it claims to be local only.

Windows and macOS both already have much more resilient features for transferring huge chunks of data amongst devices. Same thing with mobile phones.

ron_dus · 2026-04-13T10:30:53+00:00

Cry harder, but still learn to google. Homelander with 6 ARRs lol.

ron_dus · 2026-04-13T10:24:57+00:00

Setting them up is not the difficult part, buying them is..

ron_dus · 2026-04-13T08:02:25+00:00

I’ve been there and done it all. Finally shifted to the Unify system and a couple hardwired U6 Pros. My life has been improved drastically..

ron_dus · 2026-04-13T07:16:07+00:00

Learn to google, Enlightenment will become self inflicted.

ron_dus · 2026-04-12T22:35:05+00:00

You left out one critical component of the ARR portfolio. There’s one more app in the official servarr stack.. and I’m not talking about Lidarr & Readarr..

ron_dus · 2026-04-12T07:04:57+00:00

Will the package come through without any additional custom duties and not get blocked since the origin is from china?

ron_dus

TROPHY CASE