ON THE FLY CERTIFICATE GENERATION
Certificate generation is provided by the rule set of an AI-powered extension used to categorize the domains and restrict access to the specific categories of websites. As a result, a user may receive a return “blocked” error page with a valid certificate. If the domain falls under a category of rules, in response to a user's DNS query, the domain name is extracted from the header of the query; a certificate is generated based on the domain's name; a “Blocked” error page (with a valid certificate) using a route certificate is returned. Thus, a valid error page informs the client why the website cannot be reached, in which category/-ies it has been included, and what level of threat this page has.
1 . A method for generating a custom error message in response to a DNS query, the method comprising:
receiving a domain request from a computing device;
checking identification information for the requested domain against a set of rules establishing whether access to the requested domain is permitted; and
reporting to the computing device a determination as to whether upon determination that access to the requested domain is not permitted according to the set of rules with a reason why the access to requested was not permitted according to the set of rules.
2 . The method of claim 1 , wherein access to the domain is permitted or not permitted based on category of the domain.
3 . The method of claim 1 , wherein the set of rule is a response policy zone (RPZ).
4 . The method of claim 3 , wherein the RPZ is generated according to parameters given by a user's administrator.
5 . The method of claim 4 , wherein the determination is based on the parameters given by the user's administrator.
6 . The method of claim 1 , wherein the domain request is received at an RPZ zone generator from the computing device.
7 . The method of claim 1 , wherein the computing device is a VPN server.
8 . A system for generating a custom error message in response to a DNS query, comprising:
at least one processor; and
a computer-readable medium storing computer executable instructions stored therefore that when executed by the at least one processor cause the system to:
receive a domain request from a computing device;
check identification information for the requested domain against a set of rules establishing whether access to the requested domain is permitted; and
report to the computing device a determination as to whether upon determination that access to the requested domain is not permitted according to the set of rules with a reason why the access to requested was not permitted according to the set of rules.
9 . The system of claim 6 , wherein access to the domain is permitted or not permitted based on category of the domain.
10 . The system of claim 6 , wherein the set of rule is a response policy zone (RPZ).
11 . The system of claim 10 , wherein the RPZ is generated according to parameters given by a user's administrator.
12 . The system of claim 11 , wherein the determination is based on the parameters given by the user's administrator.
13 . The system of claim 8 , wherein the domain request is received at an RPZ zone generator from the computing device.
14 . The system of claim 8 , wherein the computing device is a VPN server.
15 . A non-transitory computer-readable medium storing computer executable instructions stored thereon that when executed by at least one processor cause the at least one processor to:
receive a domain request from a computing device;
check identification information for the requested domain against a set of rules establishing whether access to the requested domain is permitted; and
report to the computing device a determination as to whether upon determination that access to the requested domain is not permitted according to the set of rules with a reason why the access to requested was not permitted according to the set of rules.
16 . The non-transitory computer-readable medium of claim 15 , wherein access to the domain is permitted or not permitted based on category of the domain.
17 . The non-transitory computer-readable medium of claim 15 , wherein the set of rule is a response policy zone (RPZ).
18 . The non-transitory computer-readable medium of claim 17 , wherein the RPZ is generated according to parameters given by a user's administrator.
19 . The non-transitory computer-readable medium of claim 15 , wherein the domain request is received at an RPZ zone generator from the computing device.
20 . The non-transitory computer-readable medium of claim 15 , wherein the computing device is a VPN server.