[judge2020]

captive.apple.com is just for captive portals - technically networks can (and do) spoof it, but it's just a connectivity check. Past that you can do any test you want over https.

[benatkin]

I'd rather have both in one :)

neverssl strikes a pretty good balance