Reply to thread

Message

<blockquote data-quote="Arequire" data-source="post: 790590" data-attributes="member: 59283">There&#039;s a myriad of issues that can be caused by intercepting HTTPS. Things like breaking or not using certificate validation, using broken or outdated ciphers, degrading TLS connections and using outdated TLS versions, opening up connections to TLS attacks (Beast, Freak, Logjam, Crime, etc.)I wouldn&#039;t say it&#039;s okay (I refuse to use AdGuard for this exact reason and its one of the reasons I don&#039;t use a traditional AV) but AdGuard themselves <a href="https://kb.adguard.com/en/general/https-filtering/https-filtering-known-issues" target="_blank">acknowledge</a> the issues that HTTPS interception causes and actively try to avoid them as best they can. AV vendors just seem to be either negligent or indifferent when it comes to this stuff.Here&#039;s a research paper about it if you want to get into the nitty gritty details:<a href="https://jhalderm.com/pub/papers/interception-ndss17.pdf" target="_blank">https://jhalderm.com/pub/papers/interception-ndss17.pdf</a>And the conclusion they came up with:</blockquote>

[QUOTE="Arequire, post: 790590, member: 59283"] There's a myriad of issues that can be caused by intercepting HTTPS. Things like breaking or not using certificate validation, using broken or outdated ciphers, degrading TLS connections and using outdated TLS versions, opening up connections to TLS attacks (Beast, Freak, Logjam, Crime, etc.) I wouldn't say it's okay (I refuse to use AdGuard for this exact reason and its one of the reasons I don't use a traditional AV) but AdGuard themselves [URL='https://kb.adguard.com/en/general/https-filtering/https-filtering-known-issues']acknowledge[/URL] the issues that HTTPS interception causes and actively try to avoid them as best they can. AV vendors just seem to be either negligent or indifferent when it comes to this stuff. Here's a research paper about it if you want to get into the nitty gritty details: [URL]https://jhalderm.com/pub/papers/interception-ndss17.pdf[/URL] And the conclusion they came up with: [/QUOTE]

Verification