What is HTTPS scanning in Avast Antivirus?

HTTPS scanning is a feature of Web Shield in Avast Antivirus that is automatically enabled when Avast Antivirus is installed. HTTPS scanning decrypts and scans encrypted traffic to detect potential malware contained on sites using HTTPS connections.

What is HTTPS?

HTTPS (Hyper Text Transfer Protocol Secure) is a more secure version of the standard HTTP connection. HTTPS adds encryption that prevents others from eavesdropping, and helps ensure that you are connected to the intended server.

For detailed information about HTTPS, refer to the wikipedia page below:

• http://en.wikipedia.org/wiki/HTTPS

What is the benefit of HTTPS scanning?

While an HTTPS connection ensures that the connection can not be modified by anyone else, it does not guarantee that the content contained on the site is clean. Malware scripts and binaries can be placed into an HTTPS page that appears to be safe. The HTTPS scanning feature prevents you from downloading malicious content onto your PC from sites secured with an HTTPS connection.

Is the HTTPS connection still secure when Avast scans it?

Yes. When Web Shield in Avast Antivirus scans the HTTPS connection, the data being scanned remains encrypted and secure.

Is all my web traffic sent to the Avast servers?

No. All scanning occurs locally on your PC during the HTTPS connection. No one outside of your PC can read or decipher the connection.

Does Avast scan all HTTPS connections?

When HTTPS scanning is enabled, Avast Antivirus scans all HTTPS connections for potential malware, except for verified sites that have been added to our list of safe sites. This list primarily contains banking sites. If your bank is not on this list, or you want to exclude a certain site from HTTPS scanning, you can verify the site's security certificate and submit it via email to banks-whitelist@avast.com.

Alternatively, you can disable the HTTPS scanning feature.

How do I disable HTTPS scanning?

While it is recommended to keep HTTPS scanning enabled, you can disable the feature.

1. Open the Avast user interface and select ☰ Menu ▸ Settings ▸ Protection ▸ Core Shields.
2. Scroll down to Configure shield settings, then click the Web Shield tab.
3. Untick the box next to Enable HTTPS scanning.

For detailed instructions, refer to the following article:

• Managing HTTPS scanning in Web Shield in Avast Antivirus