Hacker News Reader

I don't know if anyone confirms, but my default installation of Kaspersky Internet Security tried to MiTM my traffic as well. I couldn't download some packages (Android SDK I think) beacuse of certificate error. It then turned out some default feature in KIS installs own certificate and proxies secure traffic through

View on HN

What Kaspersky does is different: It creates a new cert/key for every installation. Same with Avast.

You can still argue whether it's a good idea to intercept HTTPS at all (I'd say it's certainly not a good idea). But it doesn't have any super-severe vulns like superfish or privdog (at least not any I could find having a quick look at it).

Reply on news.ycombinator.com