Cannot log into account.firefox.com

jarome

Bitdefender seems to be doing a man-in-the middle, which keeps me from being able to log into my Firefox account. It prevents me from accepting their certificate. How do I get around this?

https://accounts.firefox.com/signin?service=sync&context=fx_desktop_v3&entrypoint=preferences

mohsen.a540

Just disable the SSL Scan for good its actually creats more vulnerabilities

https://www.bitdefender.com/support/what-to-do-when-security-certificates-cannot-be-verified-installed-1090.html

jarome

Those instructions do not work for BD 2018. But how does it create more vulnerabilities?

I should be able to have BD accept one cert/page, but keep checking the others.

mohsen.a540

Main interface>view features>webprotection settings(gear)>scan SSL off

This is it for BD Total Security 2018

you can also remove the root certificate from windows (run>certmgr.msc>trusted root certificates) and FF itself ... 

and about the vulnerability all i can say is BD local cert has weaker encryption algorithm this could creat some funny problems beside MITM by BD itself as you mentioned

 

https://Google.com with bd cert: TLS, RSA, AES 128, SHA,128 KEYS TLS 1.2

https://Google.com without bd cert: TLS,ECDHE,ECDAA,AES 128,GCM,SHA256,128 KEYS TLS 1.2

more info:

https://www.pcworld.com/article/2889692/some-bitdefender-products-break-https-certificate-revocation.amp.html

https://github.com/ably/ably-js/issues/277

 

i think its better be off but do as devs recommend