[Android Software/Hacking General [Developers Only]] MrT69:
Let me explain this with an example.

Host blocking or DNS is nothing more than decide Good or Bad Address. When you put some address in your hosts file and point them to 0.0.0.0 or 127.0.0.1 than this would mean to your Operation System, hey, whenever you need to use this URL or Domain then use this IP address.

At the beginning of the Ads nightmare they ads Industrie was just using HTTP connections. At this point the user starting using hosts files and everything was fine.Beginning in the year 2004 the Ads Industrie starting to use https advertising because this has different advantages.

Better tracking

Https is a direct connection from your application to there server or web service

Better logging

With https its much more easy to log ip addresses because the server negotiated the direct connection to your system

Better spying

The https connection is hiding the entire traffic and what will happens on your system. When you open a tunnel to the remote server no one can track the traffic. But this is dangerous because you don't know what will be transmitted.

Best example for this is the famous forbes.com address. They have started to push some maleware and spyware to your PC.

https://www.extremetech.com/interne...-turn-off-ad-blockers-promptly-serves-malware

And this is only one example of so many.

My famous questions at this point:

Why every IT Pro, God and Specialist is telling us HTTPS is secure and safe when this things are possible? Because for one only reason. They have no clue about SSL.

The arguments about so different encryption methods or algorithm is anoying. When I don't see what will come from this server to my PC and I need to think about hey, it might be something evil then this is seriously everything but not safe.

Installing a Root Certifiate is nothing more than a kindly confirmation from your side. It's a silent agreement you will trust the way which your data from your PC will flow. Whoever is telling you a SSL Certificate make it possible to steel data or privacy is just someone who has no clue about anything. With just a Certificate only this would be never ever possible.

A Root Certificate is only to confirm the way of the Data flow and transmission. The evil traffic or also the good traffic i.e. your logins to mail or bank or whatever needs to be done from the application. The application takes your password and user account within clear text and push it trough the tunnel. Within this way it is a safe procedure that no one other can read the data except the server at the other end.

What I'm doing with the keweon Root Certificate?

This certificate is an "Unbounded Wild Card Certificate" which make sure every URL is able to get a valid HTTPS connection.

The reason

The ads industry currently still believes that they can force user to watch the ads crap. Therefore they are using the HTTPS technology to make sure that this will 100% arrive your system. If you block now the HOSTS they will see the HTTPS error and because of this they assume, hey, this damn user is using an Adblocker. They take the error message and punish the user with no content.

No one within the world will ever force me to do things I don't want to do. Freedom means I can decide. Making my own decisions every day is the proof of freedom for me. Whether that is always good what I decide is another story.

They have decided that no one with a valid HTTPS connection can see the content. OK, but do I really need to accept this? Never.

keweon is just the thing that break the things they made. It's a rule breaker.

Let's take PayPal as an example for this.

Add the address 127.0.0.1 paypal.com to your hosts file. Now open this within your browser without and with HTTPS.

Without https you have a clean site, with you will get an error message and you can add an exception to your browser. Do it and you will see again a blank page. Are you able to read any data? No, because there is nothing you can track.

Now do the same with a different address and do it without the keweon Root Certificate.

195.201.221.5 paypal.com

You will have the exact same screens as with 127.0.0.1 or 0.0.0.0.

Now again, do it with the keweon Root Certificate. You will see a valid https connection but the same stupid blank screen. There is no way to track your password or login because there is nothing where you can type this in.

Actually I have more than 60 Million entries within the Database and round about 75 to 80% are served via https. When I block this you have 2 options. You can confirm the error messages manually and have a few sites blocked because they are detecting the HTTPS error or you let confirm this errors automatically and make sure they are not able to see you will do Adblocking.

That's all. It's nothing more than a automatically confirmation. And that's also the reason why I would never release any application for using keweon. This is the warranty for all users I have technically no chance or option to do some evil things.

It's your Browser or your Applications installed on you PC or Mobile device who is calling the URLS. If this Domain is on the Blacklist then you are establishing the SSL connection to the Keweon ZSB (Zero Session Broker) Server which just only confirms, yep, this is on the Blacklist and YOU was calling this URL direct or indirect via a script.

You decide to establish the connection. I only offer the option to you to have a valid tunnel with no data flow. You can use keweon without the Certificate. And if you are sad about the so many manual error confirmation then the Certificate will do the Job.

That's the core of my vision. It's up to you to decide. Take it if you think you can trust this. Take it if you think it's useful. But whatever this System offers it is finally your decision what you want to do or how deep you want to protect yourself.