Request for assistance with Firefox 157 TLS/SSLKEYLOGFILE warning
Hi Amazing Friends
I am proud Mozillian from India. I served as Chair, Mozilla Reps Council twice in the past, good to connect you once again.
I need your expert help on following.
One of my friend is facing an issue with the latest Firefox 157 browser. Firefox is displaying the following warning while accessing the Kotak Bank website
“Your connection may not be private. An app or service may see your encrypted traffic from this site.”
The Firefox explanation indicates that the issue is related to TLS Logging / SSLKEYLOGFILE being enabled.
She has Norton 360 anti-virus and suspecting that if the antivirus/security may be involved in inspecting encrypted HTTPS traffic.
We would particularly like to understand:
Why Firefox 157 is detecting TLS key logging on system, which application or service is setting/using SSLKEYLOGFILE, whether Norton 360 is enabling it, and whether there is a safe Firefox or Windows configuration change that can eliminate the warning without weakening HTTPS security.
We would appreciate the opportunity if some of you can help at your earliest convenience.
Thank you very much for your help.
Regards,
Shahid
ყველა პასუხი (1)
Hi Shahid, the error links to Troubleshoot network errors when TLS key logging is enabled to explain the relation and potential external reasons for that.
It's not clear whether you're:
- facing an error that might be related to this warning, as a potential culprit
- looking to resolve the privacy & security dimension of any similar decryption
- looking to suppress the warning and let somebody still listen in.
Norton 360 anti-virus and suspecting that if the antivirus/security may be involved in inspecting encrypted HTTPS traffic.
That is very likely.
Why Firefox 157 is detecting TLS key logging on system
Because it interferes with its operation, similarly to other external security appliances, and if a third–party tool is breaking secure connections for the consumer, it has to be part of the error to help draw visibility to the potential TLS appliance doing a bad job facilitating the connections. (Users blame the browser, when they should be blaming their antivirus.)
which application or service is setting/using SSLKEYLOGFILE
That's not known to the browser. It can be set by whoever incl. the system or the user, and the artifacts read again by anyone and everyone locally (which is why it is dangerous).
whether Norton 360 is enabling it
That's a question for Norton, pertaining to the particular security suite, version, and features enabled.
უნდა შეხვიდეთ ანგარიშზე პასუხის დასაწერად. გთხოვთ, დასვათ ახალი შეკითხვა, თუ ჯერ არ გაქვთ ანგარიში.