4 ms·
I do not belive data is massively harvested by man-in-the-middle of TLS as it would be a difficult challenge to reverse engineer all of the custom protocols tha
by simon_acca 8y ago
I do not belive data is massively harvested by man-in-the-middle of TLS as it would be a difficult challenge to reverse engineer all of the custom protocols that power the different services: each session comprises hundreds of requests of custom-schema json, xml, over HTTP, websocket and other protocols. Moreover these protocols change all the time since the same entity controls both servers and clients.
This does not preclude snooping on a specific TLS session or harvesting data at a different stage.