Question Kaspersky without HTTPS Scanning - Still safe?

[cofer123]

One of the main "issues" I have had with Kaspersky is that it always slows down page loading. It's a small difference, but noticeable, and sometimes even annoying, since page loading doesn't behave as snappy as with Defender or Eset. However, after recently experimenting with HTTPS scanning disabled, Kaspersky behaves just as fast as if it wasn't there.

But what is the cost of having that disabled? Can other of Kaspersky's modules make up for losing that layer of defense? Anyone has experimented this before?

 

[oldschool]

I don't use K but you should be fine disabling HTTPS scanning. A number of K users on MT disable that setting. Make sure you use an ad blocker and your browsers phishing protection, e.g. Safe Browsing, Smartscreen, etc.

 

[cofer123]

I don't use K but you should be fine disabling HTTPS scanning. A number of K users on MT disable that setting. Make sure you use an ad blocker and your browsers phishing protection, e.g. Safe Browsing, Smartscreen, etc.

Thanks. Firefox + uBlock Origin since forever here, so it should be good.

I've also noticed I can set trusted addresses, apparently disabling connection scans for those domains. I will run some tests to check if I can still keep the performance boost for my most visited sites while having scanning working for everything else.

 

[SeriousHoax]

This browsing speed slow-down is the reason why I can never settle on Kaspersky and I also prefer not to disable a product's core protection feature. Without it Kaspersky would miss infected javascripts, infected html, malicious redirects, etc. Sometimes, some remnants can even remain on browser cache without detection. But of course if you don't visit suspicious sites, then that's not a problem. If you do online shopping then you should enable it when you do because lately seeing a lot of smaller shopping sites getting infected via stealer malware that can't be detected without the HTTPS scanning feature.

 

[cofer123]

I've ran some tests with trusted addresses and it works as expected.

This is what YouTube looks like with default settings on Firefox:

And after adding it as a Trusted Address in Kaspersky:

The MITM scanning doesn't even trigger for these sites, and the speed difference is there. Pages open fast and are snappy as if HTTPS scanning was disabled globally.

Now going a bit off-topic, but does anyone know if this degree of control is also possible on Eset? I've written a review a few months ago where I reported issues with some sites randomly breaking layout/images, and lately I've identified that it's because of its HTTPS scanner. I've tried adding addresses to Eset's excluded content scan list, but it still seems to MITM connections and change certificates.

 

[Pat MacKnife]

Hi,
Yes for me it was the most important reason too because of this slow browsing with K.
After one month i returned to BD free (after bugfixes) everything goes faster now , browsers and site loading

 

[Ink]

IMO, it is safe to turn off HTTPS scanning.

For reference, Need Advice - Does Windows Defender does HTTPS scanning?
Not to forget the billions of phone devices without any sort of HTTPS scanning interference.

Browsers are very secure these days, and include a few passive features such as Google Safe Browsing. The rest of things are easy to maintain:

• Keep your OS up-to-date
• Regular checks on Browser updates (preferably latest stable builds)
• Must use a content-blocker (ie. AdGuard Ad-Blocker, uBlock Origin)
• Optional use of security extensions (ie. Malwarebytes Browser Guard) -- if compatible.
• Optional use of DNS-based content filtering (ie. NextDNS)

 

[ForgottenSeer 100397]

I have Kaspersky installed on two systems, but I disabled HTTPS scanning. However, I choose not to use or activate features like Safe Money, etc.

 

[SeriousHoax]

Now going a bit off-topic, but does anyone know if this degree of control is also possible on Eset?

Yes, it's possible. For Kaspersky and other products, adding sites to trusted list means that it won't block the site even if it's malware as well as not do HTTPS scanning. But if I remember correctly, for ESET you can do the above while there's also an option to make ESET not decrypt HTTPS traffic for specific sites without putting them to whitelist. That's how to do it.

 

[harlan4096]

In Kaspersky, You can only exclude sites only for HTTPS:

 

[cofer123]

Yes, it's possible. For Kaspersky and other products, adding sites to trusted list means that it won't block the site even if it's malware as well as not do HTTPS scanning. But if I remember correctly, for ESET you can do the above while there's also an option to make ESET not decrypt HTTPS traffic for specific sites without putting them to whitelist. That's how to do it.
View attachment 279607

Thanks, that's what I was looking for.

 

[Pat MacKnife]

I have Kaspersky installed on two systems, but I disabled HTTPS scanning. However, I choose not to use or activate features like Safe Money, etc.

The https scanning in K is that named "encrypted connections" ??? in network settings ?

 

[harlan4096]

Yes:

 

[SeriousHoax]

In Kaspersky, You can only exclude sites only for HTTPS:

View attachment 279608

This puts them on whitelist/trusted list resulting in not dong HTTPS scanning also as a bonus. It's different from what I showed above for ESET that exclude sites from HTTPS scanning only (decrypt the connection to scan website content) without putting them into trusted/whitelist.

 

[harlan4096]

Hum I'm not sure, it's a separated list of Trusted URLs in module Safe Browsing...

If You add one URL in one of the those lists, did not appear in the other...

Also, when You add a full URL in 1st one (Encrypted connections), automatically it only adds main domain, not the full URL as it does Safe Browsing Trusted URLs option.

I guess not exactly the same...

 

[Bot]

One of the main "issues" I have had with Kaspersky is that it always slows down page loading. It's a small difference, but noticeable, and sometimes even annoying, since page loading doesn't behave as snappy as with Defender or Eset. However, after recently experimenting with HTTPS scanning disabled, Kaspersky behaves just as fast as if it wasn't there.

But what is the cost of having that disabled? Can other of Kaspersky's modules make up for losing that layer of defense? Anyone has experimented this before?

Disabling HTTPS scanning in Kaspersky can improve page loading speed, as you have observed. However, it is important to understand the potential consequences of disabling this feature.

HTTPS scanning is designed to inspect encrypted connections for potential threats or malicious content. By disabling it, you may be limiting Kaspersky's ability to detect certain types of malware or protect against phishing attacks that are transmitted over encrypted connections.

While other modules in Kaspersky's security suite can provide additional layers of defense, such as real-time scanning, firewall protection, and behavior monitoring, it is worth noting that HTTPS scanning adds an extra level of security.

Ultimately, the decision to disable HTTPS scanning should be based on your individual risk tolerance and the importance you place on page loading speed versus enhanced security. If you engage in safe browsing practices and visit trusted websites, the risk may be minimal. However, if you frequently visit unfamiliar or potentially risky websites, it may be advisable to keep HTTPS scanning enabled for enhanced protection.

 

[SeriousHoax]

Hum I'm not sure, it's a separated list of Trusted URLs in module Safe Browsing...

View attachment 279669

View attachment 279668

If You add one URL in one of the those lists, did not appear in the other...

Also, when You add a full URL in 1st one (Encrypted connections), automatically it only adds main domain, not the full URL as it does Safe Browsing Trusted URLs option.

I guess not exactly the same...

I just did a test, and they are different indeed. I was only partially right.

1) The Trusted Address option in the network settings put the sites completely in whitelist so, No detection even if malware + No HTTPS scanning. If you check the website's certificate, then it's not Kaspersky, it's the actual certificate used by the site. This is equivalent to ESET's whitelist option.

2) The option "Do not scan web traffic from trusted URLs" available in Safe Browsing option means, No detection even if it's malware + HTTPS scanning. So Kaspersky still decrypt the connection to scan. If you check the website's certificate, then it's Kaspersky's. It is kind of equivalent to ESET's "Found malware is ignored" option. With this option, you would still have the performance impact caused by HTTPS scanning. Without going into full details, ESET's equivalent option more useful, capable and makes more sense than this one.

So still what I initially said is not seems to be present in Kaspersky that is present in ESET and that is only ignore HTTPS scanning but still block the site if available on their blacklist. So Kaspersky has two ways to whitelist, ESET has three, and ESET's number 2 is more useful than Kaspersky's number 2. I can explain why if required in another topic/comment.

 

[amirr]

I don't use K but you should be fine disabling HTTPS scanning. A number of K users on MT disable that setting. Make sure you use an ad blocker and your browsers phishing protection, e.g. Safe Browsing, Smartscreen, etc.

Me too:

 

[Virtuoso]

This browsing speed slow-down is the reason why I can never settle on Kaspersky and I also prefer not to disable a product's core protection feature. Without it Kaspersky would miss infected javascripts, infected html, malicious redirects, etc. Sometimes, some remnants can even remain on browser cache without detection. But of course if you don't visit suspicious sites, then that's not a problem. If you do online shopping then you should enable it when you do because lately seeing a lot of smaller shopping sites getting infected via stealer malware that can't be detected without the HTTPS scanning feature.

How about selecting the middle option: "Scan encrypted connections upon request from protection components." Maybe this will resolve the problem.

 

[cofer123]

An update:
I never bothered to install Kaspersky's Firefox add-on. However, upon installing it on Firefox, this page loading slowdown behavior disappears completely and Kaspersky behaves as fast as Eset even with HTTPS scanning enabled.

Does anyone have any idea why?