Skip to content
kaspersky beta

beta

  • Register

  • Login

  • Categories
  • KForum
  • KClub
  1. Home
  2. ENGLISH USER FORUM
  3. Business
  4. KES - Kaspersky Endpoint Security
  5. Archive
  6. 11.7
  7. Traffic checking (Web-AV, Web-Control, Mail-AV, IDS)
  8. Excluded domains (domain.tld) are still decrypted

Excluded domains (domain.tld) are still decrypted

Scheduled Pinned Locked Moved Traffic checking (Web-AV, Web-Control, Mail-AV, IDS)
4 Posts 2 Posters 2.6k Views 3 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • T Offline
    T Offline
    Timur Born
    wrote on last edited by Jarvis
    #1

    <p><strong>Reproduction steps: Add domain.tld (askmrrobot.com) to "Trusted addresses" list to exempt it from being decrypted.</strong></p>
    <p><span></span></p>
    <p><strong>Actual result: Kaspersky script is still added to the web-site. The only way to make this work is to  add "www." or "." to the domain exception. Since the "Trusted addresses" dialog <span style="text-decoration: underline;">specifically</span> lists "example.com" as legitimate format I assume this to be a bug.</strong></p>
    <p><strong>Curiously I also reported this to support for KIS where the same happens and just got told that this was "by design"?! To make things worse with KIS you cannot use the "
    ." workaround (invalid format error), so for KES we at least have some way to exclude a whole domain.</strong></p>
    <p><span></span></p>
    <p><strong>Expected Result: Whole domain, including all sub-domains, should be excluded from decryption.</strong></p>
    <p><strong></strong></p>
    <p><strong>These are screenshot using KIS, but the same applies to KES:</strong></p>
    <p><strong></strong></p>
    <p><strong>askmrrobot.com</strong></p>
    <p><strong><img src="https://i.imgur.com/BGr0upF.png" alt="" width="487" height="238" /></strong></p>
    <p><strong></strong></p>
    <p><strong>www.askmrrobot.com</strong></p>
    <p><strong><img src="https://i.imgur.com/3cNdouU.png" alt="" width="483" height="214" /></strong></p>

    E 1 Reply Last reply
    0
    • T Timur Born

      <p><strong>Reproduction steps: Add domain.tld (askmrrobot.com) to "Trusted addresses" list to exempt it from being decrypted.</strong></p>
      <p><span></span></p>
      <p><strong>Actual result: Kaspersky script is still added to the web-site. The only way to make this work is to  add "www." or "." to the domain exception. Since the "Trusted addresses" dialog <span style="text-decoration: underline;">specifically</span> lists "example.com" as legitimate format I assume this to be a bug.</strong></p>
      <p><strong>Curiously I also reported this to support for KIS where the same happens and just got told that this was "by design"?! To make things worse with KIS you cannot use the "
      ." workaround (invalid format error), so for KES we at least have some way to exclude a whole domain.</strong></p>
      <p><span></span></p>
      <p><strong>Expected Result: Whole domain, including all sub-domains, should be excluded from decryption.</strong></p>
      <p><strong></strong></p>
      <p><strong>These are screenshot using KIS, but the same applies to KES:</strong></p>
      <p><strong></strong></p>
      <p><strong>askmrrobot.com</strong></p>
      <p><strong><img src="https://i.imgur.com/BGr0upF.png" alt="" width="487" height="238" /></strong></p>
      <p><strong></strong></p>
      <p><strong>www.askmrrobot.com</strong></p>
      <p><strong><img src="https://i.imgur.com/3cNdouU.png" alt="" width="483" height="214" /></strong></p>

      E Offline
      E Offline
      Egor.Pokrovsky
      Kaspersky Lab
      wrote on last edited by
      #2

      <p>1)Diffenence between usin example.com and mask, like * or www. is "by design".2)Is the plagin installed in browser in this test?</p>

      1 Reply Last reply
      0
      • T Offline
        T Offline
        Timur Born
        wrote on last edited by
        #3

        <p>1) Does "example.com" without mask do anything then?</p>
        <p></p>
        <p>2) The browser plugin was not installed.</p>
        <p></p>

        E 1 Reply Last reply
        0
        • T Timur Born

          <p>1) Does "example.com" without mask do anything then?</p>
          <p></p>
          <p>2) The browser plugin was not installed.</p>
          <p></p>

          E Offline
          E Offline
          Egor.Pokrovsky
          Kaspersky Lab
          wrote on last edited by
          #4

          <p>@timur-born1)it's put to exclusion site with address example.com.  I create bug about incorrect promt.</p>

          1 Reply Last reply
          0
          Reply
          • Reply as topic
          Log in to reply
          • Oldest to Newest
          • Newest to Oldest
          • Most Votes


          • First post
            Last post
          0
          • Categories
          • KForum
          • KClub