So apparently, a software called fiddler is able to very easily decrypt secure https traffic with a click of a few buttons: http://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/DecryptHTTPS

I know fiddler is a credible piece of software, but surely you cannot just start decrypting secure https traffic using this tool, so easily.

Whats the catch here guys? Is there more to it? is there any requirements?

I just wish to learn more about this.



1 Answer 1


They are doing a man-in-the-middle attack which needs the user to either ignore security warnings or to explicit import the CA used by fiddler. For more discussion about this topic have a look at How can I prevent a man-in-the-middle (MITM) attack on my Android app API?

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .