Jeff has mentioned it in their forums too.






The Man-In-The-Middle 'attack' sure sounds scary, but it is really the only way one can intercept and manipulate HTTPS traffic in order to filter ads from HTTPS traffic. Realistically, though, how much of an 'attack' is it when *you* are the man who is in the middle? However, you can disable the feature for web sites individually or turn the feature off altogether. This is merely an optional feature for those who want to retaliate towards malevolent entitities who think it's funny embedding their advertisements in encrypted web traffic.
is it generating local machine certificate (based on your machine) or are you trusting an Adguard (company) certificate? It's no secret that since version 5.7 Adguard is able to filter secured connections (https).
For proper filtering of secured connections, a mechanism called Man-In-Middle is used. By the way, filtering of secured connections in the popular antiviruses works the same way. E.g: Eset Nod32 and Bitdefender.
For this method to work correctly, Adguard imports its own root certificate in certificate store that your browser uses. If https-connection filtering is enabled, Adguard automatically detects browsers installed on your computer and installs the root certificate in their stores.
For this method to work correctly, Adguard imports its own root certificate in certificate store that your browser uses. If https-connection filtering is enabled, Adguard automatically detects browsers installed on your computer and installs the root certificate in their stores.However I installed Pale Moon for testing after Adguard was in place, and almost every site I go to triggers a warning. I have not yet seen a way to make it recheck for browsers to "fix"... there ought to be a button somewhere. Guess I will resort to looking it up. <grumble>




Thanks for link. Not sure how I feel about trusting an "unknown" company to be a man-in-the-middle for ssl... seems a bit risky(?)










Think I will wait till adguard gives you a way to whitelist sites from ssl filtering.



Currently it seems adguard supports ssl filtering for all ssl (minus the exclusion whitelist), this seems to be too all encompassing from a security stand point.



Original address: https://www.donationcoder.com/forum/index.php?topic=38579.0