HTTPS scanning in Web Shield - FAQs

What is HTTPS scanning?

HTTPS scanning decrypts and scans encrypted traffic to detect potential malware contained on sites using HTTPS connections.

What is HTTPS?

HTTPS (Hyper Text Transfer Protocol Secure) is a more secure version of the standard HTTP connection. HTTPS adds encryption that prevents others from eavesdropping, and helps ensure that you are connected to the intended server.

For detailed information about HTTPS, refer to the wikipedia page below:

• http://en.wikipedia.org/wiki/HTTPS

What is the benefit of HTTPS scanning?

While an HTTPS connection ensures that the connection can not be modified by anyone else, it does not guarantee that the content contained on the site is clean. Malware scripts and binaries can be placed into an HTTPS page that appears to be safe. The HTTPS scanning feature prevents you from downloading malicious content from sites secured with an HTTPS connection onto your PC.

Is the HTTPS connection still secure when AVG scans it?

When the Web Shield in AVG scans the HTTPS connection, the data being scanned remains encrypted and secure. While HTTPS scanning is in effect, the Web Shield and your browser are on the same PC.

Is all my web traffic sent to the AVG servers?

No, all scanning occurs locally on your PC during the HTTPS connection. No one outside of your PC can read or decipher the connection.

Does AVG scan all HTTPS connections?

When HTTPS scanning is enabled, AVG scans all HTTPS connections for potential malware, except for verified sites that have been added to our list of safe sites. This list primarily contains banking sites. If your bank is not on this list, or you want to exclude a certain site from HTTPS scanning, you can verify the site's security certificate and submit it via email to banks-whitelist@avg.com.

Alternatively, you can disable the HTTPS scanning feature.

How do I disable HTTPS scanning?

While it is recommended to keep HTTPS scanning enabled, you can disable the feature:

1. Open the AVG user interface and select ☰ Menu ▸ Settings.
2. Go to Basic protection ▸ Web Shield.
3. Untick the box next to Enable HTTPS scanning.

For detailed instructions, refer to the following article:

• Managing HTTPS scanning in Web Shield in AVG AntiVirus