SSL scan override and ads

[Ch3vr0n]

Problem 1. I run a few sites that are protected with Let's Encrypt certificates. Up until a few days ago, when clicking on the lock icon in the address bar, firefox would properly show "secured by let's encrypt" or something like that. Now i just noticed this has changed and has been overwritten by "Verified by Avast Web/Mail shield" and "Connection verified by certificate issuer not recognised by Mozilla".

I want that override gone, and restored back to the way it was. What setting(s) do i need to change.

Problem 2. As probably many have, even paid products such as my Internet Security, still push op ads to advertise other products (like secureline) i have no interest in. I would like to stop seeing that crap. Paid products should not push/contain ads for other products. I found this topic https://forum.avast.com/index.php?topic=230644.0 but i can't see any setting like that for Internet security. Please advise

[DavidR]

1. They are still protected by that certificate, only avast users would see the avast certificate as to be able to scan https traffic it has to do that intercept.  I don't believe there is a way/setting of removing the certificate, effectively you would have to disable all https scanning in the Web Shield customization settings (not for specific sites).  That would leave you vulnerable to malware on https sites, just because they are https doesn't mean they are clean.

What Firefox and Avast version are you using ?

2.  The setting is there, just that Asyn is using the German language version of Avast Premium.
See attached English Version of the UI > Settings > General > Personal Privacy.

[HK]

Thanks you DavidR for explanation. Ch3vr0n, you can find more information about HTTPS and certificates in this blog post.

https://blog.avast.com/2015/05/25/explaining-avasts-https-scanning-feature/

Best regards,
HK

[polonus]

One could test it here inside your browser:  https://www.ssllabs.com/ssltest/viewMyClient.html

Also conider this info:  https://www.ise.io/casestudies/fighting-back-against-ssl-inspection-or-how-ssl-should-work/

NSA warnings:  https://www.ise.io/casestudies/fighting-back-against-ssl-inspection-or-how-ssl-should-work/

polonus

[Ch3vr0n]

I know what SSL certificates are and https. That wasn't the question @HK. The question was to DISABLE the avast override of HTTPS scanning. They admit it themselves its a MITM attack, which is malicious behavior BY NATURE. It shouldn't be doing that.

Either way, problems have been solved. Settings disabled.