Reply to thread

Message

<blockquote data-quote="amirr" data-source="post: 909709" data-attributes="member: 85496">Hi, all, my friend said this to me and I liked to share:Well, if you read the thread entirely, you see that some people are against HTTPS filtering (such as security123) and some are ok with the trade-off as for them the filtering is more important than HTTPS integrity.My own position is that indeed HTTPS filtering “breaks” HTTPS (as it performs a MITM attack, although a benevolent one, at the risk of obscuring evil ones or origin problems), so I would disable it.But I understand that people can think otherwise, and prefer to filter HTTPS if it makes them feel more protected because their AV is able to filter the HTTPS protocol (which as discussed before isn’t really needed).So in the end, it’s a personal choice.If you want to ensure the integrity of the communication, then yes, add those sites ( banking sites and sites you use to shop online.) to the exclusions list if you still use HTTPS filtering.(Also, as EV certs are on their way out, the setting to not filter EV certs only will soon not make sense anymore)</blockquote>

[QUOTE="amirr, post: 909709, member: 85496"] Hi, all, my friend said this to me and I liked to share: Well, if you read the thread entirely, you see that some people are against HTTPS filtering (such as security123) and some are ok with the trade-off as for them the filtering is more important than HTTPS integrity. My own position is that indeed HTTPS filtering “breaks” HTTPS (as it performs a MITM attack, although a benevolent one, at the risk of obscuring evil ones or origin problems), so I would disable it. But I understand that people can think otherwise, and prefer to filter HTTPS if it makes them feel more protected because their AV is able to filter the HTTPS protocol (which as discussed before isn’t really needed). So in the end, it’s a personal choice. If you want to ensure the integrity of the communication, then yes, add those sites ( banking sites and sites you use to shop online.) to the exclusions list if you still use HTTPS filtering. (Also, as EV certs are on their way out, the setting to not filter EV certs only will soon not make sense anymore) [/QUOTE]

Verification