Just want to share since I recently learned about PKI.
Turns out I have parental controls enabled on my account still. I’ve been on this plan for years. Anyways, here’s what I get when I visit mullvad.net:

This is no doubt because VPNs are on the naughty list of what kids can’t access, since that obviously bypasses their restrictions. For some reason it’s in Italy. What I’m supposed to get:

It looks like T-Mobile is basically MiTM me to get web filtering to work. The only reason I noticed this is because I got an invalid CA warning, since ofc they aren’t using a real CA to impersonate this website (no legitimate CA allows that). Unfortunately I can’t see whatever dumb warning page they were trying to send me.


I use a persistent (Wireguard) VPN back to my home network at all times. Primary benefit is avoiding any MitM, with secondary benefits including access to local services, and DNS ad-blocking.