When entering some https sites with Kaspersky (Free) HTTPS scanning enabled (default settings) (Settings -> Additional -> Network -> Encrypted connections scanning), they load for a long time, then the error ERR_SSL_VERSION_INTERFERENCE (in Chrome) shows up. Then the site successfully loads for some reason. Does anyone else have this problem? The problem seems to disappear when disabling HTTPS scanning. Haven't tried in different browsers yet. Others seem to have this problem too in Kaspersky forum, with Kaspersky Internet Security, but no good solution seems to exist (either they are dangerous or reduces the security).
Kaspersky Free causing ERR_SSL_VERSION_INTERFERENCE
- Thread starter CoherentCrayon
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
- Status
- May 26, 2014
- 1,339
I had this problem too with Internet Security version 2019, it will be fixed with the release of patch B (already in beta testing).
The solution for Chrome according to Kaspersky forum is the following:
KIS 19 Causing Resolving Host delays on Chrome [cross post > merged]
The solution for Chrome according to Kaspersky forum is the following:
KIS 19 Causing Resolving Host delays on Chrome [cross post > merged]
I saw that one, but I didn't disable TLS 1.3 because that reduces the security. Not sure if the risks of disabling TLS 1.3 is worth it instead of the risk of disabling HTTPS scanning.
- May 26, 2014
- 1,339
- May 13, 2017
- 2,639
Not to mention, that invading the browser with the "fake" certificate lowers the security as well.
How Kaspersky makes you vulnerable
SSL scanning is the first thing I disable in AV.
- Jul 14, 2015
- 773
I don't think its resolved, still getting error sometimes , also here on MT (with patch B)
disable TLS 1.3 in chrome is much better.
that's so bad to hear patch can't fix it
I uninstalled KFA because of this stupid issue, even disabling TLS 1.3 couldn't solve it
I don't want to disable https scanning
I uninstalled KFA because of this stupid issue, even disabling TLS 1.3 couldn't solve it
I don't want to disable https scanning
- Jun 7, 2018
- 221
That is from 2015. I'm sure they have done something against that until now. Can someone confirm?
I don't think there is any changeThat is from 2015. I'm sure they have done something against that until now. Can someone confirm?
almost all well-known AVs do that because it gives them full access to the https urls
even adguard for desktop does that
only some AVs such as emsisoft and comodo (not 100% sure) utilize web filter similar to hosts file which only blocks domains, not the full urls => lower efficiency but don't neccessarily lower our https security
- Jun 7, 2018
- 221
Then it's best to set it to: "Do not scan encrypted connections."??
that's the only 100% working solutionThen it's best to set it to: "Do not scan encrypted connections."??
other solutions may partially work or don't work
therefore, you can disable it and use some chrome/firefox extensions to temporarily replace it while we're all waiting for the offical patch
- May 13, 2017
- 2,639
This topic itself confirms, that they did not, since KAV 2019 suffers from it and instead of solving it, they recommend to disable TLS 1.3.That is from 2015. I'm sure they have done something against that until now. Can someone confirm?
https://www.ghacks.net/2018/06/27/firefox-61-fix-secure-connection-failed/
Last edited:
- Apr 24, 2016
- 7,260
It seems that this issue is resolved for me with a Google Chrome update.
New version 68.0.3440.75 is out.
Chrome Releases: Stable Channel Update for Desktop
New version 68.0.3440.75 is out.
Chrome Releases: Stable Channel Update for Desktop
- Apr 24, 2016
- 7,260
for me, the issue is much less frequent but it is still there. I don't disable TLS 1.3
KFA also breaks norton power eraser so NPE can't complete its scan, crashes at the end
KFA also breaks norton power eraser so NPE can't complete its scan, crashes at the end
- Apr 24, 2016
- 7,260
Indeed less frequent, but still there.
Hope it will be fixed soon by Kaspersky.
That's the only thing I don't like of KFA it's HTTPS scanning with their own certificate.
On the other hand KFA is one of the best free AV's out there.
See Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings and the HUB.
So I disabled the scanning of EV certificates (no MITM when i'm doing my banking) and accept it.
- Jul 14, 2015
- 773
Thats one of the reasons i'm not using KFA anymore, i want to surf the web with no errors, they made patch B and it was not fixed...
Anyone using Kaspersky Security Cloud free with these (bug) errors ?
Anyone using Kaspersky Security Cloud free with these (bug) errors ?
Thats one of the reasons i'm not using KFA anymore, i want to surf the web with no errors, they made patch B and it was not fixed...
Anyone using Kaspersky Security Cloud free with these (bug) errors ?
I am but got tired of the 200 meg warning which you only get every day? so I uninstalled the secure surfing part. Just have the AV cloud part running now.
- Status
