23 reputation
3
bio website
location
age
visits member for 2 years, 4 months
seen May 25 at 17:39

Apr
17
awarded  Scholar
Apr
17
accepted How does my antivirus determine which CTL is used?
Aug
31
comment How does my antivirus determine which CTL is used?
In the case of Chrome, IE and FF the proxy settings are determined by the Windows OS internet settings; the socket my proxy listens on. I always assumed that is the browser interface with the network. Unless there is an accessible layer in between...
Aug
31
comment How does my antivirus determine which CTL is used?
I've been led to suspect the AV is doing something sneaky with Winsock LSP which can sit between local proxy and browser. My concern is if I square off with my own LSP routine or tinker with the low-level browser settings, the AV might flag me as malware or I'll create some kind of competing deadlock condition. Currently I'm looking into a macro-esque solution to automate control of the AV's GUI. Messy business.
Aug
30
comment How does my antivirus determine which CTL is used?
I omitted the detail that the cert's I am feeding to the client are on-the-fly generated by my own SSL filtering http proxy. I had to import my own signing cert into the OS CTL, but the AV uses it's own CTL for SSL scanning and also somehow intercepts my proxy communications to the client. The real question I should be asking is "How can I guarantee that I am the final agent to talk to the client?"
Aug
30
awarded  Supporter
Aug
19
comment How does my antivirus determine which CTL is used?
I found that the AV actually alters the certificate according to its own CTL before handing it to the OS, not changes which CTL the OS uses.
Aug
16
awarded  Student
Aug
16
asked How does my antivirus determine which CTL is used?