how do you block websockets in a world with tls around the majority of http connections? wouldn't you have to resort to proxies with certificate authorities fo

how do you block websockets in a world with tls around the majority of http connections? wouldn't you have to resort to proxies with certificate authorities forced on users in order to block websockets?