[Windows 8.1 (x64-bit)]: "AdGuard Blocks The CRUCIAL Green Firefox (SSL) Label On Secure Sites"

Discussion in 'Quality Control' started by GuardAd, Jun 9, 2018.

  1. GuardAd

    GuardAd Beta Tester

    Joined:
    Jun 10, 2016
    Messages:
    8
    Filter HTTPS Protocol (Disabled)
    [​IMG]

    Filter HTTPS Protocol (Enabled)
    [​IMG]

    The above behavior was observed with AdGuard 6.3.1118.3511 Beta on Firefox 52.8.1 ESR — however, have noticed the same on some prior builds of (AdGuard + Firefox,) as well.
     
  2. Boo Berry

    Boo Berry Moderator + Beta Tester Moderator

    Joined:
    May 30, 2012
    Messages:
    3,764
    That happens on sites using Extended Validation (EV) certificates and this is normal when using HTTPS filtering in AG for Windows/Mac/Android. Other than the green text, the site is still secure (look at the lock icon) due to it using AG's certificate (which is needed for HTTPS filtering) instead of the site's EV certificate.

    There's no way to get the green text to show while using HTTPS filtering, other than using the Do not filter websites with EV certificates option in AG's settings > Network section. Of course, using that option means sites using EV certificates will not get filtered (and thus no ads, trackers, etc. are removed).
     
  3. avatar

    avatar Administrator Staff Member Administrator

    Joined:
    Oct 26, 2010
    Messages:
    13,135
    Additionally, it's surprising that `mozilla.org` is filtered, it's in the default list of HTTPS exceptions. Have you changed anything there?
     
  4. GuardAd

    GuardAd Beta Tester

    Joined:
    Jun 10, 2016
    Messages:
    8
    Oh yes, perfectly legit. — we're on the same page on this point.


    Yep, mozilla.org is being filtered because it's been removed from my HTTPS Exclusions — actually, have deleted all of the natively excluded sites since I prefer to have a complete manual override. :D

    AdGuard is doing its filtering job admirably well on the HTTPS front but, since that's such an eye-catching visual aid of security . . . . . . would really appreciate if the green Firefox (SSL) site label could somehow be left visible — or alternatively at least, if an AdGuard label could displace the same. [​IMG]

    Thank you both — for the quick responses. [​IMG]
     
  5. Boo Berry

    Boo Berry Moderator + Beta Tester Moderator

    Joined:
    May 30, 2012
    Messages:
    3,764
    Unfortunately it's not possible, hence the setting to not filter sites with EV certificates.

    In my opinion, this is a bad idea. There are websites that need to be added to the HTTPS exclusions or else they don't function correctly. Plus, a lot of the domains in the HTTPS exclusions list are banking institutions, which from a security perspective is a very good idea to have them excluded from AG's filtering. For example removing mozilla.org from the HTTPS exclusions, if I recall correctly, breaks Firefox extension/addon updates and Firefox Sync, if you use that. I think it might break Firefox/Nightly updates too, again, if I recall correctly.
     
  6. GuardAd

    GuardAd Beta Tester

    Joined:
    Jun 10, 2016
    Messages:
    8
    Generally speaking, yes — that does affect quite a few HTTPS sites including mozilla.org . . . . . however, in my own case, have created the necessary exclusion rules wherever required.