Author Topic: Avast and DigiCert Collaboration  (Read 4294 times)

0 Members and 1 Guest are viewing this topic.

Offline EdAgee

  • Jr. Member
  • **
  • Posts: 60
Avast and DigiCert Collaboration
« on: March 24, 2020, 10:54:23 AM »
Could somebody please point me to documentation regarding the collaboration between Avast and DigiCert?

Thank you.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast and DigiCert Collaboration
« Reply #1 on: March 24, 2020, 11:15:40 AM »
Hi, not sure what you mean, DigiCert is a CA.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline EdAgee

  • Jr. Member
  • **
  • Posts: 60
Re: Avast and DigiCert Collaboration
« Reply #2 on: March 24, 2020, 12:38:08 PM »
Yes, and there is a file, data_3, located here:

. . . AppData\Roaming\AVAST Software\Avast\Cache\Cache

And that file contains a lot of frequently updated information about these 5 certificates:

DigiCert Assured ID Root CA - - - DigiCert Assured ID Root CA             
DigiCert Global Root CA - - - DigiCert Global Root CA        
DigiCert Global Root G2 - - - DigiCert Global Root G2             
DigiCert Global Root G3 - - - DigiCert Global Root G3
DigiCert High Assurance EV Root CA - - - DigiCert High Assurance EV Root CA

Other information caused me to think there was some sort of collaboration between the two companies, but if I am wrong I would certainly adjust my direction of thought on the matter.

Oh yes, and thank you for your attention to my line of enquiry.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast and DigiCert Collaboration
« Reply #3 on: March 24, 2020, 12:44:25 PM »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline EdAgee

  • Jr. Member
  • **
  • Posts: 60
Re: Avast and DigiCert Collaboration
« Reply #4 on: March 24, 2020, 12:56:28 PM »
Thank you for the link, but what is Avast's purpose in maintaining updates on those 5 certificates?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast and DigiCert Collaboration
« Reply #5 on: March 24, 2020, 01:09:04 PM »
All Avast files are signed by DigiCert, nothing to worry about.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline EdAgee

  • Jr. Member
  • **
  • Posts: 60
Re: Avast and DigiCert Collaboration
« Reply #6 on: March 24, 2020, 01:19:12 PM »
So my use of the vocabulary "collaboration" is correct, yes?

And I didn't mean to come across as worried.

I am just wondering how this could be after what I thought were some problems between Avast and DigiCert.  And then the DigiCert purchase of Symantec in 2017.

Do you know when the collaboration started between DigiCert and Avast?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast and DigiCert Collaboration
« Reply #7 on: March 24, 2020, 01:30:21 PM »
So my use of the vocabulary "collaboration" is correct, yes?
Nope, it's a paid piece of service.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline EdAgee

  • Jr. Member
  • **
  • Posts: 60
Re: Avast and DigiCert Collaboration
« Reply #8 on: March 24, 2020, 01:37:25 PM »
Please just take that question of mine as an aside.  That definition is not an important point.

But I would like to know where I can find any information about when Avast started using the DigiCert products?

After a number of hours searching the Net I was not able to find anything.

In fact, the information that Avast is using DigiCert products also did not turn up on the Net.

If anyone can point me to any documentation on any of this I would be very appreciative.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast and DigiCert Collaboration
« Reply #9 on: March 24, 2020, 02:51:00 PM »
But I would like to know where I can find any information about when Avast started using the DigiCert...
I'm not aware of any such info, but definitely as long as I can remember...
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline EdAgee

  • Jr. Member
  • **
  • Posts: 60
Re: Avast and DigiCert Collaboration
« Reply #10 on: March 24, 2020, 03:27:27 PM »
I have about three hours of research notes and the information that Avast is using DigiCert products did not show up in any of the many, many leads I checked.

But it is now out there, because I suspect the bots have picked up on this thread, and my own team on my site now knows about this, so this information isn't going away.  But our online meetings on my site are strictly confidential, so nothing gets leaked from there.

Also, during my research I found that there have been some folks in this business that have doubts about DigiCert products.  There have been such discussions on this site, too.

For that reason the Avast customers probably should have already been informed of what we now have in this thread.

And that is just for starters.

By the way, now I am worried.  I wasn't before.

By the way, this all started because of that other thread and that signature code showing up in a regular Gmail account.  If any of the employees had gone to the trouble to address that issue in that thread I might never have started down this DigiCert road I have gotten on.  I waited for a fair number of business days for an answer to arrive in that thread, so it isn't like I was pushing really hard.  And I still haven't gone into that at Google, except informally.  Also in confidence.

Did you know the following, Asyn?

Quote
August 2017 was relatively slow on the M&A front.  Symantec sold its website security business to DigiCert for $1 billion, plus a stake in the larger entity.

A lot of money at stake if somebody slips up.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast and DigiCert Collaboration
« Reply #11 on: March 24, 2020, 03:37:39 PM »
Did you know the following, Asyn?
Quote
Symantec sold its website security business to DigiCert for $1 billion, plus a stake in the larger entity.
Yep.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline EdAgee

  • Jr. Member
  • **
  • Posts: 60
Re: Avast and DigiCert Collaboration
« Reply #12 on: March 28, 2020, 06:33:50 AM »
First of all let me thank CraigB for recommending in your recent correspondence that I continue my research and on that note I have a question for Asyn which is stepping away for the moment from the questions thus far answered that related to the Avast use of DigiCert products:

Is Avast inserting a security certificate of its own when I see the Avast Web/Mail Shield Shield Self-signed Root?


Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast and DigiCert Collaboration
« Reply #13 on: March 28, 2020, 07:11:35 AM »
Is Avast inserting a security certificate of its own when I see the Avast Web/Mail Shield Shield Self-signed Root?
Yes, it's needed for HTTPS scanning. (https://support.avast.com/en-ww/article/190/)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline EdAgee

  • Jr. Member
  • **
  • Posts: 60
Re: Avast and DigiCert Collaboration
« Reply #14 on: March 28, 2020, 07:20:26 AM »
Is Avast inserting a security certificate of its own when I see the Avast Web/Mail Shield Shield Self-signed Root?
Yes, it's needed for HTTPS scanning. (https://support.avast.com/en-ww/article/190/)

Thank you.