New man-in-the-middle attack: proxy the request through an IP address tagged as a prohibited location, and you can permanently deny access without ever needing to modify or even decided SSL/TLS.