itman 1,630 Posted May 9, 2016 Share Posted May 9, 2016 (edited) Win 7 SP1 x64, Eset Smart Security ver. 8.0.319.0, IE 11 Eset failed revoked certificate test on this SSL test web site: https://cryptoreport.websecurity.symantec.com/checker/views/sslCheck.jsp -EDIT- Eset did pass this revoked certificate test: https://www.grc.com/revocation.htm - sort of. I received a Eset alert about an untrusted cert. which I assume was generated because cert. was not in TRCA certificate store. So question outstanding is why it failed the Symantec check which I assume used a revoked TRCA store certificate? Edited May 9, 2016 by itman Link to comment Share on other sites More sharing options...
chrcoluk 2 Posted May 13, 2016 Share Posted May 13, 2016 it fails because ESET doesnt check for revoked cert's, is recommended if you value proper TLS security to not use https scanning. hxxp://users.encs.concordia.ca/~mmannan/publications/ssl-interception-ndss2016.pdf Link to comment Share on other sites More sharing options...
Recommended Posts