I've had reliable success by using http://neverssl.com to force a basic HTTP connection for kickstarting a public WiFi portal login, although I have to disable NextDNS (iOS) too.

The ironic part of neverssl.com is that it does indeed now support SSL.

I use good ol example.org