02 — Mechanics
How the relay
intercepts traffic
From MDM profile to tunnelled connection.
The MatchDomains mechanism
The relay server — h2o on Linux
HTTP/3 QUIC
CONNECT proxy
Allowlist hardening
MDM profile key