An client-side SSL interception API exists: SSLKEYLOGFILE. It isn't any help for security appliances though. Also, it is only implemented in Firefox and Chrome

An client-side SSL interception API exists: SSLKEYLOGFILE. It isn't any help for security appliances though. Also, it is only implemented in Firefox and Chrome; Microsoft doesn't support it in their browser or at the OS level. I'm suprised it still exists, it seems like a juicy malware target, just like these poorly implemented SSL MitMs.