3 ms·
TLS can be decrypted with private key. Just keep your private key secret. For example, this feature is useful for debugging TLS encrypted communication with ser
by lisivka 10y ago
TLS can be decrypted with private key. Just keep your private key secret. For example, this feature is useful for debugging TLS encrypted communication with server by capturing data and decrypting it using WireShark. Forward secrecy breaks that.
- anonymousDan 10y agoOk I'm missing something here. If an internal bank employee initiates a TLS session to an external service, the only key the bank could hope to access is the session key if it has control over the end host, in which case it can just store the session key for each connection. What private key are you referring too if not the session key?