They can already block traffic based on IP address. That’s single-point blocking. Being able to block based on the client’s willingness to let their traffic be interception is a whole additional class and it also indicates that the client is willing to let their traffic be intercepted. The two things are very very very different.
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls