Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-interception]

SSL Interception is a technique that can be used to intercept SSL sessions in order to inspect the encrypted traffic.

0
votes
0answers
41 views

Are plaintext POST payloads over HTTPS safe? [duplicate]

My knowledge on information security is limited. I argued with a colleague more specialized in that area that, for the purposes of calling a login Web service, POST plaintext payloads sent over HTTPS ...
0
votes
0answers
87 views

Why are banks largely absent from the HSTS preload list?

There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
0
votes
1answer
31 views

How can I know the protocol versions supported at OpenSSL1.1.0g

How can I identify the versions (TLSv1.2, TLSv1.1, TLSv1.0, SSLv3, etc.) supported in OpenSSL1.1.0g when I manually compile it from its source (NOT the one shipped with the OS like ubuntu) without ...
0
votes
1answer
66 views

Authenticating Certificate for School Wifi [duplicate]

My school wifi, which requires me to login using ny username and password, is requiring that I accept a certificate in order to connect. I don’t know if this is a trusted root certification but what ...
0
votes
1answer
43 views

What problem would there be with an open private key for developers to use?

I always find it a pain to create a new key for development and I was thinking of doing something like this both for myself and to help other developers out: Register a domain like fakesite.com Get a ...
0
votes
2answers
64 views

Why did OCSP Must-Staple break BitDefender SSL interception

I use one of my website as a test for various TLS techniques. Recently I added OCSP Must-Staple to this domain. After a week I got a complaint from a user they were unable to visit the website. They ...
0
votes
3answers
74 views

Is it possible to intercept the payload of a secure request in plain text?

Consider we run the following request: import requests url="https://secretsub.example.com/secretpath/post.php" payload = {'secretmessage1' : 'foo','secretmessage2' : 'bar'} r = requests.post(url,...
-2
votes
1answer
344 views

How can I intercept Android application's SSL traffic where SSL pinning is used?

I want to capture the SSL traffic of an Android Application which I think uses SSL pinning. I've tried running an app which says it uses VPN Tunneling and a Root Certificate to capture the SSL ...
3
votes
1answer
68 views

Self-signed certs on LAN shared with others [duplicate]

My WiFi is shared with my family, and my siblings have friends come over sharing the WiFi password carelessly. Anyone of those guests could have a rogue device and not even know it. My brother has ...
0
votes
1answer
65 views

How SSL Handshake recognise any attack

I already know that a replay attack on an SSL handshake is ineffective, but if we suppose that an "intruder" has listened and has got all of the information from a previous handshake, how will the ...
1
vote
0answers
97 views

iOS traffic not shown in proxy when SSL pinning enabled

I have and iOS application to test. As per the latest security fix SSL pinning is enabled in the app. But now I am not able to see any traffic related to the application in my proxy tool. But ...
1
vote
1answer
314 views

Session ID in the very First Client Hello

Is it normal to have Session ID in the first Client Hello, and then the server picks it up and accepts the same Session ID and uses it in all further TLS traffic. That is the "Client or Browser" tells ...
0
votes
0answers
158 views

MITM attack- self signed certificate not used for all sites

Process- 1. ran ARP spoof to become in othe middle 2. generate certificate using openssl 2. enable and ran IP forwarding (Exact command) 3. ran sslsplit (Exact command) Problem- When I tried to go to ...
0
votes
0answers
28 views

In depth TLS/SSL design detail [duplicate]

After reading The First Few Milliseconds of an HTTPS Connection, I am trying to understand why TLS/SSL design needed to be designed in this way (for instance, why we need two keys in TLS instead of ...
-1
votes
1answer
44 views

Mobile device SSL Certificate generation [closed]

I have been researching about SSL certificates in mobile devices, especially in the banking sector. I have these questions and I have no idea where to find answers but here. Is there a technology ...
2
votes
2answers
62 views

Identification of TLS POODLE Vulnerability

How can I identify whether the remote server is vulnerable to TLS POODLE vulnerability? Although, there are online scanners such as Qualys SSL Labs. As per my understanding, these online scanners do ...
2
votes
1answer
218 views

How can police get someone's search history?

Sometimes I see news articles saying that someone was suspected of a crime so the police got their search history and found various google search terms etc. What are the possible ways they can do ...
-1
votes
2answers
80 views

Why have distributions default HTTP package sources instead of HTTPS [duplicate]

Many distributions have HTTP links in their sources list for packages. Proof: https://docs.parrotsec.org/doku.php/mirrors-list https://docs.kali.org/general-use/kali-linux-sources-list-repositories ...
1
vote
0answers
45 views

TLSv1.2 compatibility in client side [closed]

I'm trying to connect ejb via SSL. Server is configured for TLSv1.1. If I set my client TLS_PROTOCOL as TLSv1.0 (on the ejb side), it throws an error. If I set my client TLS_PROTOCOL as TLSv1.1 (...
1
vote
1answer
150 views

Android application interception issue

I'm a newbie to android pen testing and started off with an application. The app uses HTTPS and works fine without configuring any proxy. When a proxy like a burp suite is configured, the app ...
0
votes
1answer
177 views

Hilton and Choice Hotel websites reported insecure but valid SSL by chrome? [duplicate]

I was checking out hotel websites for reservations this weekend and noticed hotel giants Hilton and Choice websites are being reported to have valid but insecure SSL. For Choice, chrome is reporting ...
0
votes
0answers
19 views

Is it possible for a VPN to overwrite 'root' SSL certificates and run MITM attacks? [duplicate]

I was recently reading a reddit thread about a new Facebook VPN, and people were talking about the possible security implications, specifically with SSL. They implied SSL isn't necessarily safe ...
1
vote
0answers
600 views

Failed to connect to www.google.co.in:443 error in burp suite?

I am trying to intercept the https request, but I getting this error while searching anything in URL.it's hitting my burp, but I can't get any response after clicking forward button,it comes with this ...
3
votes
0answers
3k views

How does TLS 1.3 break inspection?

The latest research seems to indicate that TLS 1.3 completely breaks the MITM/proxy model of many current security tools. I don't fully understand how it does that and if there are ways around this. ...
9
votes
2answers
2k views

My school wifi asks to 'trust' a certificate on Iphone's, does it this allow them to view SSL traffic?

There is a lot of confusion around this on here, so I am making this post to be sure to understand it correctly. My school uses Aruba networks wifi, and after I type my Active Directory username and ...
1
vote
3answers
183 views

Number of bytes in a TLS handshake

How can I identify precisely the exact number of bytes the ClientHello and ServerHello in a TLS traffic needs? this is for traffic analysis purpose to capture the TLS bytes of interest (client hello ...
21
votes
5answers
5k views

Can a VPN Provider MitM my SSL traffic without me noticing?

If I connect to lets say gmail over a VPN. How does the provider forward the traffic without exposing my IP, but also without breaking the SSL. Shouldn't gmail know my real IP if the traffic just gets ...
0
votes
0answers
33 views

SSL MITM with custom home router [duplicate]

Can you execute an MITM attack if I give you access to XYZ laptop whose default gateway is a custom home router which you can muck around any which ways you like? (Alice)XYZ Laptop (accesses https://...
4
votes
1answer
329 views

Preventing a Burp and Intercept

I have created an authentication API to manage user sessions and the works. To log a user in, the user send their credentials to my API endpoint and it returns “true” or “false” based on their login. ...
0
votes
0answers
32 views

HTTPS Inspection: how to detect at (own) server? / does it break Apache digest authentication? [duplicate]

I have 2 questions regarding HTTPS/TLS/SSL inspection/interception, which is widley used in company networks: How can I detect it at a server? At a client I can check the validator of the certificate....
-1
votes
1answer
403 views

How does browsers detects HSTS sites?

I have come across scenarios where we introduce a proxy which does SSL decryption and it fails on HSTS sites, e.g. Facebook, Gmail, etc. In a MITM proxy setup the Facebook page will be signed by the ...
0
votes
1answer
49 views

Seeing SSL requests in unencrypted form from a remote client [closed]

I was wondering how I could be able to see SSL requests in an unencrypted form from remote clients (specifically, my phone). I heard that you are supposed to use CA certificates, but how would I ...
2
votes
1answer
412 views

Is it secure to rely on websocket connection?

In a client-server communication scenario over secure websocket, client is authorized securely and from there on, I have two choices: Assign a unique random ID (session) and check that on subsequent ...
3
votes
1answer
313 views

Is this possible with SSLsplit?

SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both IPv4 and IPv6. For SSL and HTTPS connections, SSLsplit generates and signs forged X509v3 certificates on-the-fly, based on ...
1
vote
1answer
119 views

Can SSL traffic encrypted with a weak cypher be bruteforced?

Take the following scenario: Attacker performs a man-in-the-middle attack on Client, redirecting the DNS records of www.example.com to point to a malicious server Client connects to the malicious ...
1
vote
1answer
1k views

If SSL private key is compromised, what can they do?

If a 3rd party who is malicious manages to get a hold of a SSL private key for domain (ex: xyz.com), but does not have access to the domain registrar or DNS for the domain, how can the 3rd party ...
7
votes
2answers
293 views

What happens if my VPN drops momentarily while using an SSL connection?

The Situation I am in an office with a connection that is routed through a BigIP firewall, with SSL interception; our computers have a root certificate to permit the intercept certs. If I browse to a ...
0
votes
1answer
769 views

Is CloudFlare's SSL half-baked since they become the Man-in-the-Middle (MitM)? [duplicate]

I recently read a somewhat funny article at crimeflair.net, questioning (read: murdering) the way CloudFlare provides SSL. In their words: "CloudFlare's half-baked SSL: suspicious sockets layer". ...
1
vote
1answer
97 views

How can I snoop on a mutually authenticated SSL connection?

Our company connects to an external service through an outdated library (using a PHP extension for an older version of PHP). As this requires us to have a server setup in isolation for this service, I ...
0
votes
1answer
155 views

Hotspot SSL issues, MtTM like exceptions

I have doubt about how to implement hotspot for my startup. Idea is to have implemented WPA2-Enterprise with remote radius server and splash page. This implementation came after the reason of ease of ...
5
votes
1answer
195 views

Client requiring our SSL Private Key to configure the Load Balancer that reaches our server. Makes sense?

I'm facing an unusual situation, I hope you can clarify this for me. We manage some applications that are accessible through HTTPS requests on port 443 of our server X. We have a new client that is ...
3
votes
3answers
248 views

Is implementing an SSL proxy server considered a good practice?

There are many questions on this site from users finding out that their employer has a certificate proxy in place, essentially implementing a man-in-the-middle attack so that all traffic is able to be ...
0
votes
0answers
1k views

Can a wifi router decrypt SSL/TLS information? [duplicate]

When using modem/router all internet traffic goes through it, and so are the certificates that the server sends to client. So whats the problem taking the public key out of the certificate and use it ...
1
vote
2answers
105 views

Do dynamic certificates for SSL-Interception pose a security risk due to weak entropy?

When you think about typical SSL-Interception in Firewalls, depending on the number of TLS-Connections, loads of Certificates get faked "on the fly" in a very time critical environment. In my ...
0
votes
1answer
69 views

Are URLs viewed during HTTPS/2 transactions to one or more websites from a single IP distinguishable?

This is a follow up to the original question Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable? D.W. provided an extensive summary on attack vectors ...
3
votes
2answers
340 views

Certificate Pinning vs E2E Encryption

I see that there are some APIs which exchange some sort public keys to secure the content of https connection using asymmetric encryption. Is there any added benefit to this? As far as I know, it ...
1
vote
1answer
149 views

Accepting Card payments with SNI SSL Certificate

As part of an app I'm making, I'm making a premium version that processes cards on behalf of customers using Stripe. are SNI (Cloudflare) based SSL Certificates seen as less secure for this/a bad ...
3
votes
1answer
63 views

Content Blockers decrypting SSL

I have heard about some content blockers decrypting SSL/HTTPS connections at the gateway and selectively blocking based on the content. What are the privacy concerns about this? Is there a way for ...
1
vote
2answers
4k views

Understanding SSL man-in-the-middle and its limitations

I’m trying to develop a good sense of how an SSL man-in-the-middle(s) (MITM) works. As I understand it, MITMs do their work in one of two ways: Decrypt the SSL by having a copy of the server’s ...
0
votes
1answer
1k views

Burp Suite - Although my configurations are correct, still Chrome doens't allows me to access HTTPS sites and throws an error!

I'm having a hard time to access sites with HSTS enabled via burp proxy in Chrome, everything works perfectly fine with Firefox and IE, but Chrome has stopped working since yesterday. I've followed ...