- Jul 13, 2014
- 766
To answer the question above, personally i prefer it to be disabled.
HTTPs scanning is often compared to man in the middle attacks, because they work almost in the same way. Intercepting and modifying the encrypted connection. In financial transactions, during the ''handshake'' process between your Pc and website, you don't want a third party(The antivirus with https scanning in this case) to be able to have access to your data.
Worst, imagine there is a vulnerability in your antivirus. An attacker may retrieve the required information that he needs....not from your browser, but from your antivirus itself, who is supposed to be giving you optimal protection and peace of mind.
HTTPs scanning is often compared to man in the middle attacks, because they work almost in the same way. Intercepting and modifying the encrypted connection. In financial transactions, during the ''handshake'' process between your Pc and website, you don't want a third party(The antivirus with https scanning in this case) to be able to have access to your data.
Worst, imagine there is a vulnerability in your antivirus. An attacker may retrieve the required information that he needs....not from your browser, but from your antivirus itself, who is supposed to be giving you optimal protection and peace of mind.
Last edited:
