I've recently found that even though my files that I've been encrypting are scanning as FUD, it still sets off red flags for AV. I was told that my SSL certificate expired and that that was the cause for this. What does this mean? What can I do to fix this?
What is an SSL certificate and what role does it play in detection rate? |
(May 13, 2020 09:30 PM)JuiceTooLoose Wrote: I've recently found that even though my files that I've been encrypting are scanning as FUD, it still sets off red flags for AV. I was told that my SSL certificate expired and that that was the cause for this. What does this mean? What can I do to fix this? SSL has nothing to do with your crypted file as Its mostly used with web sites. (May 13, 2020 09:30 PM)JuiceTooLoose Wrote: I've recently found that even though my files that I've been encrypting are scanning as FUD, it still sets off red flags for AV. I was told that my SSL certificate expired and that that was the cause for this. What does this mean? What can I do to fix this? Look for either OV certificate or an EV certificate, either of those will build reputation for smart screen and help with antivirus as well.
SSL certificates (or x509 certificates is the format and is just associated with SSL, witch today is TLS. No one uses SSL anymore).
The x509 certificates implements a way to digitally sign binaries and the signature can be verified using the x509 certificate. x509 also implements a chain of trust mechanism. Operating systems has a set of root-certificates that it trusts and these certificates can sign your certificate in order for your computer to trust it. x509 certificates are also valid between certain dates (don't have to, but most often) and it seems that yours have expired. The AV flags this as insecure since it could mean that someone is using a out-dated certificate (stolen or other reason) to sign malicious software. The solution is to resign the certificate by a trusted authority.
Change the website and make sure your ssl isnt expired, any browser will flag it because of the security issue not because of the content of your website.
|
|
|


![[Image: 6xBycLk.gif]](https://i.imgur.com/6xBycLk.gif)

![[Image: 2eb99610.gif]](https://i.ibb.co/55SJhvG/2eb99610.gif)