3 ms·
I wish QUIC had a non-TLS mode... if I'm developing locally I really just want to see whats going over the wire sometimes and this adds a lot of un-needed frict
by exabrial 2y ago
I wish QUIC had a non-TLS mode... if I'm developing locally I really just want to see whats going over the wire sometimes and this adds a lot of un-needed friction.
- krater23 2y agoYou can add the private key of your server in wireshark and it will automatically decrypt the packets.
- jborean93 2y agoThis only works tor RSA keys and I believe ciphers that do not have forward secrecy. Quic is TLS 1.3 and all the ciphers in that protocol do forward secrecy so cannot be decrypted in this way. You’ll have to use a tool that provides the TLS session info through the SSLKEYLOGFILE format.
- giuscri 2y agoLike which one?
- exabrial 2y agoI'm aware... sigh, I've used this method to decrypt traffic alraedy and this is a giant PITA.
- guidedlight 2y agoQUIC reuses parts of the TLS specification (e.g. handshake, transport state, etc). So it can’t function without it.