3 ms·
The article is also pointing out that .. "The researchers urge antivirus vendors to stop intercepting HTTPS altogether, since the products already have access
by deburo 10y ago
The article is also pointing out that ..
"The researchers urge antivirus vendors to stop intercepting HTTPS altogether, since the products already have access to the local filesystem, browser memory, and content loaded over HTTPS"
I wonder why they are resorting to TLS interception then. Is it just easier to intercept TLS then inspecting memory? Is it just a lack of perspective?
- WorldMaker 10y agoEase of deployment? At least for corporate interception the answer seems to be just how much easier it is to deploy a central proxy than to make sure that client software is up to date. (Forgetting, conveniently, that you have to update client certificate stores every so often.) Similarly the "it's how we've always done it" defense because companies have used that approach for HTTP for so long they don't want to invest in a new approach now that HTTPS makes it much less viable. As for consumer AV products, I have no idea how they defend that other than "let's have our tentacles in all the pies".
- emmelaich 10y agoVirus checkers can stop intrusion and hence help integrity. They can't (or actually don't) prevent loss of confidentiality. Companies that run these MITM proxies are also protecting against deliberate extrusion of sensitive data.