3 ms·
I can see an argument that software's communication over the network must be inspectable by the owner of the hardware.
by spullara 3y ago
I can see an argument that software's communication over the network must be inspectable by the owner of the hardware.
- deleted 3y ago[deleted]
- mdaniel 3y agoI don't know why but your comment reminded me of learning about $SSLKEYLOGFILE and the ability to retroactively decrypt traffic captured in Wireshark: https://everything.curl.dev/usingcurl/tls/sslkeylogfile https://everything.curl.dev/usingcurl/tls/sslkeylogfile (I was expecting there to be an entry on MDN since my first contact with that env-var was from Mozilla's TLS library but no luck) I guess it's the fact that in my mental model any supporting library doesn't have to be modified to allow viewing the traffic, and no cert-pining-breaks required