HTTP vs HTTPS – Download Insight issues

Download Insight does not work properly when files are downloaded via a HTTPS secure connection.

 

Examples:

 

When downloading the test set via HTTP from (http:// zippyshare . com), Download Insight removes all of the files (mostly WS.Reputation.1 detections, one Trojan.Cryptodefense):

 

http://youtu.be/6O_yBJoZIa8


As seen in the video above, when downloading the same test set via HTTPS from (https:// mega .co .nz), Download Insight only removes one file: Trojan.Cryptodefense. All former WS.Reputation.1 detections now have a Norton Rating of Good.


The threat posed by these files is very real. The following video highlights what happens when test sample 3.exe is executed:

 

http://youtu.be/2zgL-qtSeRg

 

Norton Community member elsewhere and I are of the view that users would expect Download Insight to function correctly, irrespective of the HTTP/HTTPS connection type.


Please investigate and advise.


Thanks

 


Norton Security
22.0.0.79

Windows 8.1 - 64 bit