Getting a "website dns.google:443 may not display correctly" pop-up

[Bez]

I was watching youtube and this pop-up happened from Kaspersky Premium.

What's it mean and what should I do about it?

I checked for updates in Kaspersky and it was up to date. Also restarted my laptop....it popups as soon as Windows restarts.

[AlexeyK]

4 часа назад, Bez сказал:

it popups as soon as Windows restarts.

Have you enabled this option? If yes, enable the second one from the list, which is set by default.

[Bez]

11 hours ago, AlexeyK said:

Have you enabled this option? If yes, enable the second one from the list, which is set by default.

It was on the Scan upon request setting so I switched it to Always but the problem persists.

Is adding it to exclusions inadvisable?

[p0k3m0n]

That's exactly what I wrote about. This will happen more and more often, because the developers behind browsers are tightening up the certificate system, while antivirus devs happily inject their own certificates, as was done 10-15 years ago, instead of using the original ones, as should be today. Kaspersky has been promising a solution to this problem for a year now, called SuperMITM, and so far all we hear is "soon". It's irritating how antivirus vendors have slept through the last few years and are now waking up because they were forced to solve the problem instead of using a old, cheap workaround.

[AlexeyK]

24 минуты назад, Bez сказал:

It was on the Scan upon request setting so I switched it to Always but the problem persists.

Is adding it to exclusions inadvisable?

Of course, you can add exclusion. Switch ssl setting to default (upon request). The error appears without launching any apps? What is the full version of your system?

[Bez]

1 hour ago, AlexeyK said:

Of course, you can add exclusion. Switch ssl setting to default (upon request). The error appears without launching any apps? What is the full version of your system?

I'm on Windows 10 22H2 and Kaspersky version is Kaspersky Premium 21.22.7.466(c)

The error pops up as soon as the laptop starts...at the windows login screen itself.

If I add to exclusions it stops. If I then clear the Exclusions list, it reoccurs after a few minutes.

Is this a certificate issue? I'm thinking I'll just leave it on the exclusions for now and clear it after a few days to see if it fixes itself.

[harlan4096]

What DNSs have You set up in Windows?

[AlexeyK]

1 час назад, Bez сказал:

Windows 10 22H2

This is not the full version. I hope that the OS has been updated regularly.)

1 час назад, Bez сказал:

Is this a certificate issue?

Yes, some problem with ssl scan, details here.

1 час назад, Bez сказал:

I'm thinking I'll just leave it on the exclusions for now and clear it after a few days to see if it fixes itself.

It's a good idea, why not - the address is safe.

58 минут назад, harlan4096 сказал:

What DNSs have You set up in Windows?

It's unclear: encrypted DNS in W10? How, it's not supported...

[p0k3m0n]

10 hours ago, AlexeyK said:

It's unclear: encrypted DNS in W10? How, it's not supported...

There are several solutions, the most popular is YogaDNS (I have been using it for years on DoH). 

I am attaching a table that perfectly shows the differences between the protocols, it may be useful to someone.

 

Edited 11 hours ago by p0k3m0n
update info

[AlexeyK]

2 минуты назад, p0k3m0n сказал:

There are several solutions

That's why there was a question about how DNS was configured.

[p0k3m0n]

5 minutes ago, AlexeyK said:

That's why there was a question about how DNS was configured.

You wrote that it is impossible under Windows 10 (quote: "it's not supported"), which again confirms your ignorance, exactly like in MITM topic.

[AlexeyK]

3 минуты назад, p0k3m0n сказал:

You wrote that it is impossible under Windows 10 (quote: "it's not supported")

Yes, it's not natively supported by W10, only by W11. YogaDNS intercepts system DNS requests like man-in-the-middle (MITM).

[AlexeyK]

@p0k3m0n Also, if you were attentive, I've attached this link above. The list of causes includes "The use of another filtering application" and there are possible solutions.

Edited 10 hours ago by AlexeyK

[p0k3m0n]

8 hours ago, AlexeyK said:

Yes, it's not natively supported by W10, only by W11.

Quote: "it's not supported". I repeat: stop talking about things you have no idea about. Period. EOT