Author Topic: Is it possible for avast! to scan SSL traffic?  (Read 17790 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76115
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Is it possible for avast! to scan SSL traffic?
« Reply #15 on: May 22, 2011, 09:24:28 PM »
Just to set this clear.
Any connection can be scanned, but to scan a secure connection makes no sense at all. ;)
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Simion

  • Advanced Poster
  • **
  • Posts: 921
Re: Is it possible for avast! to scan SSL traffic?
« Reply #16 on: May 22, 2011, 09:36:42 PM »
I always thought Avast scanned SSL email. Guess I am wrong.

Offline Simion

  • Advanced Poster
  • **
  • Posts: 921
Re: Is it possible for avast! to scan SSL traffic?
« Reply #17 on: May 22, 2011, 09:38:13 PM »
Just to set this clear.
Any connection can be scanned, but to scan a secure connection makes no sense at all. ;)

With phoney SSL certificates around, I think it would be a good idea. There are also phoney digital signatures on some programs.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76115
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Is it possible for avast! to scan SSL traffic?
« Reply #18 on: May 22, 2011, 09:41:32 PM »
I always thought Avast scanned SSL email. Guess I am wrong.

avast scans your mails.
Don't worry. ;D

W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37161
  • Not a avast user
Re: Is it possible for avast! to scan SSL traffic?
« Reply #19 on: May 22, 2011, 09:46:11 PM »
I always thought Avast scanned SSL email. Guess I am wrong.
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458



maybe someone from avast should come in here and explain this SSL thing or this thread may be very very long  ;D

Offline Simion

  • Advanced Poster
  • **
  • Posts: 921
Re: Is it possible for avast! to scan SSL traffic?
« Reply #20 on: May 22, 2011, 10:17:59 PM »
I always thought Avast scanned SSL email. Guess I am wrong.
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458



maybe someone from avast should come in here and explain this SSL thing or this thread may be very very long  ;D
Thanks, I was searching for something like that. Perhaps HTTPS comes in on varying ports in browsers, so aren't scanned like HTTP on port 80. Just a guess.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76115
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Is it possible for avast! to scan SSL traffic?
« Reply #21 on: May 22, 2011, 10:22:47 PM »
Perhaps HTTPS comes in on varying ports in browsers, so aren't scanned like HTTP on port 80. Just a guess.

Bad guess. ;)
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Simion

  • Advanced Poster
  • **
  • Posts: 921
Re: Is it possible for avast! to scan SSL traffic?
« Reply #22 on: May 22, 2011, 10:48:32 PM »
Perhaps HTTPS comes in on varying ports in browsers, so aren't scanned like HTTP on port 80. Just a guess.

Bad guess. ;)

Well, do you have a better guess, or are you just another Evangelist with 4 million inane posts? ???

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76115
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Is it possible for avast! to scan SSL traffic?
« Reply #23 on: May 22, 2011, 10:52:54 PM »
Well, do you have a better guess, or are you just another Evangelist with 4 million inane posts? ???

443
And that's no guess..!! :P
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67235
Re: Is it possible for avast! to scan SSL traffic?
« Reply #24 on: May 22, 2011, 10:58:41 PM »
I always thought Avast scanned SSL email. Guess I am wrong.
The email is decrypted by avast and scanned.
It makes no sense scan an encrypted email (SSL) connection. It's encrypted.
The best things in life are free.

Offline Simion

  • Advanced Poster
  • **
  • Posts: 921
Re: Is it possible for avast! to scan SSL traffic?
« Reply #25 on: May 22, 2011, 11:18:17 PM »
I always thought Avast scanned SSL email. Guess I am wrong.
The email is decrypted by avast and scanned.
It makes no sense scan an encrypted email (SSL) connection. It's encrypted.

Thanks for a reasonable answer, Tech. Why then can't Avast decrypt and scan SSL traffic in browsers?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76115
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Is it possible for avast! to scan SSL traffic?
« Reply #26 on: May 22, 2011, 11:26:51 PM »
Why then can't Avast decrypt and scan SSL traffic in browsers?

Ahhh... :(
You don't get it, do you.
What would be the sense of an encrypted connection, when any program can decrypt it..!!!
Please think about that.

Edit: Read this: http://en.wikipedia.org/wiki/HTTP_Secure
« Last Edit: May 22, 2011, 11:30:19 PM by Asyn »
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67235
Re: Is it possible for avast! to scan SSL traffic?
« Reply #27 on: May 22, 2011, 11:39:16 PM »
Simion, the encryption is to prevent any eye on it. If a program can decrypt it, it won't be secure. Think in your banking transactions over https.
The best things in life are free.

Offline Simion

  • Advanced Poster
  • **
  • Posts: 921
Re: Is it possible for avast! to scan SSL traffic?
« Reply #28 on: May 22, 2011, 11:53:58 PM »
Simion, the encryption is to prevent any eye on it. If a program can decrypt it, it won't be secure. Think in your banking transactions over https.

I guess I'm not making myself clear here, so I'll rephrase the question: If Avast can decrypt and scan SSL emails, why can't Avast decrypt and scan SSL webpages?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76115
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Is it possible for avast! to scan SSL traffic?
« Reply #29 on: May 22, 2011, 11:57:04 PM »
If Avast can decrypt and scan SSL emails, why can't Avast decrypt and scan SSL webpages?

avast! can't scan ssl mails, it works in between the client and the server.
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0