Blog | G5 Cyber Security

US-CERT: Security Products That Perform HTTPS Interception Weaken Security

Department of Homeland Security s US-CERT group is warning that security products which perform HTTPS interception might weaken a company’s overall security. HTTPS inspection is a method where security products set up a man-in-the-middle proxy for HTTPS traffic. The proxy stands between the client and the remote server and intercepts HTTPS traffic, inspecting it for malware, and rebuilding the connection. The issue comes from the fact that many security products fail to reconstruct the SSL connections to the same standards clients and servers negotiated.

Source: https://www.bleepingcomputer.com/news/security/us-cert-security-products-that-perform-https-interception-weaken-security/

Exit mobile version