[nsgi]

However, this means that schools can't see what pupils search for, and that any network operator can force safe search.

[mikecb]

Schools almost ubiquitously use SSL -decrypting dpi devices with the device root installed on endpoints, bypassing both HSTS and HPKP.