I reckon that depends on where you are. I don&#x27;t have any hard data on this, just a lifetime of disappointment with hotel wifis. It&#x27;s not the captive portal on first use what irks me, but continued DNS intercepting after you pass the captive portal challenge which hampers either DNSSEC, local resolver, or both. This is not likely to change soon, so DNS folks dream about DNS&#x2F;HTTP, DNS&#x2F;TLS and all that.<p>Intercepting actual content transfers makes more sense to me than intercepting name lookups. One thing should be common - once user authenticates, no more MitMing.