AMTSO's anti-phishing test page with FREEDOME

This discussion has a more recent version.
Khairul_AKhairul_A Posts: 272 F-Secure Employee

Symptoms

AMTSO's anti-phishing test page loads successfully with FREEDOME's Browsing Protection enabled when it should be blocked.

Diagnosis

FREEDOME scans HTTP traffic for malicious content, phishing sites and trackers at VPN Gateway. As HTTPS (SSL) traffic is encrypted, FREEDOME is unable to scan the contents of the traffic. To respect and ensure the privacy of our users, FREEDOME does not block any tracking from HTTPS traffic as that would require a man-in-the-middle (MITM) attack against the HTTPS.

AMTSO's anti-phishing test page has recently started to use HTTPS.

Solution

We are working to set up an additional anti-phishing test page using HTTP.

The AMTSO's anti-phishing test page has been marked as harmful (phishing) and should be successfully blocked via reputation checking when using F-Secure SAFE's browser extension.

Sign In or Register to comment.