@Be Secure,
Yes this discussion has been going on and through various reactions from Avast team members we know what Avast does here.
OK they have learned while implementing this.
More imp[ortant discussion is why we need https scanning now more than ever. While there will be a growing malvertising threat via https as the promotion of https is a pre-text for Google to bring in ads that cannot be blocked by adblockers anymore.
About the upcoming malvertising threat, read here: https://threatpost.com/ad-networks-ripe-for-abuse-via-malvertising/111840
And what I also stressed here: http://www.pcworld.com/article/2912092/googles-push-to-encrypt-ads-will-improve-security-but-wont-kill-malvertising.html link article author = Lucian Constantin.
You now understand that an obscure extension like Request Policy in firefox and uMatrix in Google Chrome will gain so much weight as it will be utmost important to be able to pinpoint exactly what (3rd party) content to block.
I started to check on HTTPS Everywhere Atlas addresses and was startled by the security issues I stumbled upon.
Misconfigurations and security header misconfigurations or the lack thereof will also produce more and more problems.
Well weakened encryption has also plaid into the hands of the global surveillance schemes, noth those led by governments as by big commercial entities,
polonus
