On: Alarming number of DNS requests made by iOS devices

[im3w1l]

Device: Am I on a captive portal? Nonce.

Apple server: No. Same Nonce. Cryptographic signature.

If different response: Captive portal. If no response: No internet.

[im3w1l → im3w1l]

Oops, this doesn't actually work, because the captive portal can just let that one request through unmodified...