Indicate the HTTPS filtering state and the original certificate in the Filtering log
Issue Details
A major concern with HTTPS filtering is that users don't get to see the website's original certificate. We've covered this issue in our knowledge base: link.
We've partially addressed this in our desktop applications. By installing our browser assistant, users can view the original domain certificate.
However, there are limitations:
- There's no browser assistant available on Android.
- Certificates aren't visible in certain apps and browsers.
Proposed solution
In the new version of CoreLibs, we've embedded the original certificate in "der" format within the CertificateEvent.
This will allow users to view the original certificate in the filtering log.
When certificate viewing is available (not applicable for all events), we'll provide an option to see it. I suggest following an approach similar to Chrome's.
- In Chrome, a padlock icon in the address bar indicates a secure connection.
- Clicking on this padlock reveals connection details: image link.
- After clicking on the "Certificate information" link it displays the original certificate details: image link.
In our Filtering log's event details, we can offer the capability to view attributes of secure connections, along with the original certificate.
Alternative solution
No response