3 ms·
Well part of the argument that Google/Mozilla are putting forward is that some software does their man in the middle attack in bad ways that compromise user sec
by Jonnax 10y ago
Well part of the argument that Google/Mozilla are putting forward is that some software does their man in the middle attack in bad ways that compromise user security.
The picture in the article states:
Avast 11.7: Advertises DES as a cipher (It's been vulnerable for more than a decade)
AVG and Bit Defender: Vulnerable to Logjam and POODLE
Kaspersky: Vulnerable to CRIME
Net Nanny, KinderGate, CYBERsitter, NOD32, Kaspersky Internet Security (Mac): Doesn't validate certificates.
- zaphar 10y agoSure but for most of these companies conducting a security audit of their AV solution is very much not something are going to be competent at. The typical auditing companies they might hire for there compliance reasons are also not going to be competent at it. As a result, due to a lack of knowledge and a need to check boxes, they will be choosing AV solutions that lower their security. It's a perfect storm. Especially since many of the ones on the list are considered best in market for these people.
- Neil44 10y agoI can only speak to Eset as it's the only one I am sure about, but it definitely does validate certs. I have screen grabs of validation errors because they were interesting.