Tag Info

Hot answers tagged


The entire point of SSL is its resistance to eavesdropping by man-in-the-middle attacks like the one you're proposing. Your only options are: Intercept an initial HTTP request and never let the communication be upgraded to HTTPS (this will not work if the site has an HSTS record in the browser already, or if the user initially goes to https://...) Pretend ...


Any suggestions? Is is doable? You need to own a certificate trusted by the device to intercept the traffic. How this can be achieved depends on how proper and open the certificate validation on the device is. The device might have a buggy or non-existing validation of certificates. This is typically No validation at all, in which case you could use ...

Only top voted, non community-wiki answers of a minimum length are eligible