Safe Web exclusions don't prevent TLS interception

I’m having an issue with Norton Safe Web intercepting HTTPS connections used by Docker and replacing the genuine certificate with one signed by Norton Web/Mail Shield Root.

I’ve added the affected domains to Safe Web exclusions, but they’re still being TLS-inspected.

For example, with Safe Web enabled:

external url of the download → Issuer: Norton Web/Mail Shield

With Safe Web disabled:

external url of the download → Issuer: GEANT TLS RSA 1

So disabling Safe Web definitely stops the TLS interception, but the domain exclusion doesn’t.

Is there a way to exclude specific domains from HTTPS/TLS inspection while leaving Safe Web enabled?

I’d rather not disable Safe Web every time I use Docker or install Norton’s root CA inside my Docker images.

1 Like