Real site prevents connection to my caf.fr account

[chris..]

When real site is activated, I cannot connect my account to the French government website caf.fr.

Either with Firefox or ASB and banking mode I get the error messages from my capture.

If I deactivate "Real Site" I no longer have any problems for the rest of the session (even if I reactivate RS) ... But the problem returns the next session.

You also need to know that last Sunday many French government sites suffered an attack with massive data theft (no doubt more than half of the French population was affected).

So I don't know if my problem is related to the attack.

[chris..]

I've sent a request to avast but in the meantime can someone try log in ? without entering anything, just to see if the page opens ....
thanks

[Lano]

I get a maintenance message with Real Site enabled or disabled.

[DavidR]

I get a maintenance message with Real Site enabled or disabled.

I don't use Real Site and no Maintenance notice right now.

[Lano]

I get a maintenance message with Real Site enabled or disabled.

I don't use Real Site and no Maintenance notice right now.

Yes, back to a normal page now with or without Real Site.

[chris..]

Thank you for your time,

and when you click on "my account" at the top right of the page you have, do the login fields appear?

I've cleared my history and done an "ipconfig /flushdns" but it's still the same, I don't understand what's blocking with "real site".

[DavidR]

It does for me but I'm not using Real Site.

[chris..]

It does for me but I'm not using Real Site.

That's probably why it works for you.

Avast (through Real Site) uses the secure DNS (DNS over HTTPS) of "Datacamp limited" and these are the ones that block the opening of the CAF site (the site is supposedly not secure).

Using Avast secure browser, I can choose the secure DNS (Cloudflare, openDNS, Google, .... and custom) and all except avast allow connection to CAF ... even without disabling "Real Site".

It's more complicated with firefox because the "DNS over HTTPS" configuration won't take changes  ... I'm still stuck with Datacamp's DNS unless I deactivate Real Site.

This may have something to do with the fact that Firefox announces "Your browser is managed by your organization."?

Edit:it's also OK with firefox without disabling Real Site ... using a VPN with its own DNS server

[chris..]

Hi,

There are always people who report not being able to connect to the "CAF" site, and these people use avast.

I have just reactivated Real Site and the DNS datascamp limited in France is still blocking access to the site.

Not many people know what Real Site is for and how to stay safe by using other secure DNS  ... by deactivating RS.

I know that avast has been working on this for more than 10 days but obviously there has been no improvement 

People are complaining to the CAF, who don't understand and (probably) have nothing to do with it.

Many people are confusing this problem with a suspected theft of data from the CAF site.

Also, if anyone from the avast team comes across this, please let us know.

Thanks

[chris..]

hello,
I'm sending you feedback from the CAF website (French government administration):

traduc screenshoot

Following an update to the antivirus software on most of your computers, some may experience difficulties accessing the caf.fr website.
Cnaf has alerted the antivirus publishers affected by this malfunction. The bug is currently being resolved.

Hopefully this will help avast find a solution.

In the meantime, a workaround is to either disable RS, or force browsers to use other DNS for DoH (DNS over HTTPS).
edit: Or set an exception dns://*.caf.fr*

[prokopes_]

@chris.. can you please check if the problem persists today?

[chris..]

hello,
yes, if I remove the "dns://*.caf.fr*/*" exception, the problem is still there.

[prokopes_]

hello,
yes, if I remove the "dns://*.caf.fr*/*" exception, the problem is still there.

Sorry to hear that! I'll ask my colleagues to check what the problem might be. Thank you for this info.

[chris..]

It seems OK since yesterday.

ps: on the other hand I still don't receive email notifications from the forum.
In principle, it's not my provider that's blocking it.