Hi there,
I observed a strange behavior on a website when I entered my credentials ( https://www.galaxus.de/de). Login using the correct credentials (store in PW-manager) failed when eBlocker was turned on for that site. When pausing eBlocker, login was successful.
Obviously, workaround was to whitelist the site in eBlocker. Anyway, it took a while for me to think that having eBlocker turned on could be the cause for failing (I actually first thought that the PW-manager contained the wrong PW).
Do you know about such websites? This is quite rare, but it is annoying when it happens. Whitelisting the site is an option, but it is just a workaround obviously.
What do the experts think?
Comment: same behavior for Chrome, nor Safari.
@mr-bien I can only guess that galaxus.de has security measures in place that discover eBlocker (due to certificate pinning or such).
To my knowledge the only way to pass such a security measure is to add the website as trusted (Settings > HTTPS > (Tab) Trusted Websites). And just for your background: trusting a website will still block all 3rd party trackers. So there is no high risk of trusting regular websites (only trusting tracking services is not favorable).
BTW: Many payment services have similar security measures - but they are also tracking users. So for payment, I'd rather pause eBlocker briefly for performing the transaction, but I would never trust the payment service in general.
Last: If you enable the Auto Trust App (under HTTPs) you might can avoid some issues - at the risk unfavorable services get trusted. It comes with a convenience vs. protection trade off...
BTW: Privacy protection is always a trade off that comes with minor - but manageable - inconveniences. On the other hand you keep in control of your data - and get an ad-free Internet as a nice side effect.
THX!
@random, thanks for the details!
trusting a website will still block all 3rd party trackers. So there is no high risk of trusting regular websites (only trusting tracking services is not favorable).
That I did not know, but it is definitely worth knowing. 😀