Does whitelisting msftncsi.com not fix this? It may be blocked by default, but it probably shouldn't be. That said, I don't want to get into the realms of whitelisting sites by default.
whitelist.sh msftncsi.com www.msftncsi.com (on your pi) should do the trick.