Windows update server over https?

Question

Hello fellow Microsoft community,

I recently installed and started running a proxy. However I noticed that updates for Microsoft defender and Windows 10 pro are coming into the laptop over http based downloads only. I could use the link and see the cab files and clear text once it downloaded from a browser. Is there a way to force only https downloads of updates? Even the signature files for defender antivirus is running over http. How can I adapt the download mirror to only use https for windows settings? My Raspberry pi I was able to set the apt-get update sources to https.

Many Raspberry Pi update links are moving to https I noticed.

http://raspbian.org/RaspbianMirrors

When will Microsoft move to only https based update mirrors like other countries are using for Raspberry Pi's?

https://forum.netgate.com/topic/169097/rule-signature-id-sid-causing-issues-with-windows-updates?_=1642230824657

This Netgate community forum has more information on how I found this issue.

There is currently tools for polymorphism to match up signatures, with HTTP only this could be an issue. Most of the internet websites all run only https based traffic why are update URLs running http only still?

Image showing url for simple download from browser for signature inspection and locations.

Cab file download from url reuse

I can inspect and look at the text file.

I vote this system use https as well as signature matching similar to other https only Raspberry Pi mirrors we can use. Germany is almost all https for Raspberry Pi mirrors

Answer 1

RESOLVED:

Make changes to WinHTTP inside of netsh. After all updates will work with the proxy.

You must also disable all URL blocks for Azureedge.net

Answer 2

The issue has returned Windows updates are running over http again. You can see Raspberry Pi running updates over HTTPS.

Policy/compliance violation reported.

All other items are working including Disney plus and Hulu

Answer 3

You are right the system was stopped at the firewall each time and would show 0 for traffic flow.

Answer 4

Thanks for your reply, Microsoft must have repaired the issue very quickly. It is now only running on HTTPS and all update issues stopped.

This was the firewall rule that would flag the non HTTPS updates each time when this was occurring.

Answer 5

कोई भी साटवेयर डाउनलोड नही हो रहा है न ही इंस्टाले हो रहा है

लिख रहा है की विंडोज प्रॉब्लम