Ver. 8 SSL Protocol Scanning Issue - Critical

[itman 1,659]

Win 7 SP1 x64, Eset Smart Security ver. 8.0.319.0, IE 11

 

Eset failed revoked certificate test on this SSL test web site: https://cryptoreport.websecurity.symantec.com/checker/views/sslCheck.jsp

 

 

-EDIT-

 

Eset did pass this revoked certificate test: https://www.grc.com/revocation.htm - sort of. I received a Eset alert about an untrusted cert. which I assume was generated because cert. was not in TRCA certificate store.

 

So question outstanding is why it failed the Symantec check which I assume used a revoked TRCA store certificate?

Edited May 9, 2016 by itman

[chrcoluk 2]

it fails because ESET doesnt check for revoked cert's, is recommended if you value proper TLS security to not use https scanning.

 

hxxp://users.encs.concordia.ca/~mmannan/publications/ssl-interception-ndss2016.pdf