3 ms·

Does this mean...... anyone can MITM traffic over TLS that's encrypted?

• jusob 10y ago
  No, you need to get the keys from your browser: "It turns out that Firefox and Chrome both support logging the symmetric session key used to encrypt TLS traffic to a file."
• tinodotim 10y ago
  No. You still need the session key stored by the clients browser. (In this case Firefox or Chrome) > Well my friends I’m here to tell you that there is an easier way! It turns out that Firefox and Chrome both support logging the symmetric session key used to encrypt TLS traffic to a file. You can then point Wireshark at said file and presto! decrypted TLS traffic.
• deathanatos 10y ago
  No. The article is instructions that set up Chrome to share the encryption/decryption key with Wireshark. Without that key, the traffic can not be decrypted. The key only exists in Chrome and on the receiving webserver (and, if you follow the instructions, that file on disk, and then Wireshark). Once the key is discarded by all who hold it, the ability to decrypt the TLS session is lost.
• rosstex 10y ago
  This provides a way to get access to the connections that Chrome or Firefox setup, since normally those keys are stored internally by the browsers.
• mcguire 10y ago
  Well, anyone who has access to the environment of the browser.