WebApp Sec mailing list archives
Re: Security tool for monitoring HTTPS traffic?
From: Thomas Chiverton <thomas.chiverton () bluefinger com>
Date: Thu, 26 Feb 2004 11:26:13 +0000
On Wednesday 25 Feb 2004 10:18 am, John Reilly wrote:
Are they products they can look inside HTTPS traffic? Some customers doesn't trust HTTPS traffic going inside the company over the proxy!There is no way to look at the plain text content inside the https traffic - that would defeat the whole purpose of https.
4 words: Man in the middle. It's perfectly possable to intercept the inital exchange, and present the apperence of HTTPS, while evesdropping on the plain text. -- Tom Chiverton Advanced ColdFusion Programmer Tel: +44(0)1749 834997 email: tom.chiverton () bluefinger com BlueFinger Limited Underwood Business Park Wookey Hole Road, WELLS. BA5 1AF Tel: +44 (0)1749 834900 Fax: +44 (0)1749 834901 web: www.bluefinger.com Company Reg No: 4209395 Registered Office: 2 Temple Back East, Temple Quay, BRISTOL. BS1 6EG. *** This E-mail contains confidential information for the addressee only. If you are not the intended recipient, please notify us immediately. You should not use, disclose, distribute or copy this communication if received in error. No binding contract will result from this e-mail until such time as a written document is signed on behalf of the company. BlueFinger Limited cannot accept responsibility for the completeness or accuracy of this message as it has been transmitted over public networks.***
Current thread:
- RE: Security tool for monitoring HTTPS traffic? John Reilly (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? Thomas Chiverton (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? lists AT dawes DOT za DOT net (Feb 26)
- <Possible follow-ups>
- RE: Security tool for monitoring HTTPS traffic? Altheide, Cory B. (IARC) (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? John Reilly (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? dd (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? Glyn (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? Satish Chandra Prasad (Feb 26)
- RE: Security tool for monitoring HTTPS traffic? John Floyd (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? Imre Kertesz (Feb 26)
- Re: Security tool for monitoring HTTPS traffic? lists AT dawes DOT za DOT net (Feb 28)
- Re: Security tool for monitoring HTTPS traffic? Gary Flynn (Feb 28)
- Re: Security tool for monitoring HTTPS traffic? Imre Kertesz (Feb 26)