If I install something like Wireshark, Fiddler or mitmproxy, will I be able to decrypt all HTTPS content flowing from my computer to the application server of interest? If yes, then how to secure web traffic against such activity?
Ask HN: What all content can a MitM proxy/app decrypt from the HTTPS traffic?
1–4 of 4 posts
Re: Ask HN: What all content can a MitM proxy/app decrypt from the HTTPS traffic?
#2> If I install something like Wireshark, Fiddler or mitmproxy, will I be able to decrypt all HTTPS content flowing from my computer to the application server of interest?
Yes.
> If yes, then how to secure web traffic against such activity?
By uninstalling Wireshark, Fiddler or mitmproxy.
Re: Ask HN: What all content can a MitM proxy/app decrypt from the HTTPS traffic?
#3> If I install something like Wireshark, Fiddler or mitmproxy, will I be able to decrypt all HTTPS content flowing from my computer to the application server of interest? Yes. > If yes, then how to secure web traffic against such activity? By uninstalling Wireshark, Fiddler or mitmproxy.
> By uninstalling Wireshark, Fiddler or mitmproxy.
Well, I was interested in preventing others from sniffing the traffic. If I am the app owner or an app user, then anyone on the LAN or shared home network can sniff the traffic.
Re: Ask HN: What all content can a MitM proxy/app decrypt from the HTTPS traffic?
#4> If I install something like Wireshark, Fiddler or mitmproxy, will I be able to decrypt all HTTPS content flowing from my computer to the application server of interest? Yes. > If yes, then how to secure web traffic against such activity? By uninstalling Wireshark, Fiddler or mitmproxy.
> By uninstalling Wireshark, Fiddler or mitmproxy. Well, I was interested in preventing others from sniffing the traffic. If I am the app owner or an app user, then anyone on the LAN or shared home network can sniff the traffic.
> I was interested in preventing others from sniffing the traffic.
Unless you let others access your mitmproxy setup, then you do not need to worry.