You have to generate a certificate for the proxy (WebScarab) and have the client trust it. The proxy will then act as a man-in-the-middle, presenting its own ce

You have to generate a certificate for the proxy (WebScarab) and have the client trust it. The proxy will then act as a man-in-the-middle, presenting its own certificate to the client. See: http://www.owasp.org/index.php/Generating_Custom_SSL_Certificates_for_WebScarab http://www.owasp.org/index.php/Generating_Custom_SSL_Certifi...