Skip to content

Instantly share code, notes, and snippets.

View drs5ma's full-sized avatar

Daniel Saha drs5ma

View GitHub Profile
@drs5ma
drs5ma / tls_interception.md
Last active February 7, 2020 16:30
TLS Interception & SSL Inspection Blog Post

TLS Interception and SSL Inspection


The fact that "SSL inspection" is a phrase that exists, should be a blazing red flag that what you think SSL is doing for you is fundamentally broken. Compounding the problem are the mistakes that SSL inspection software authors are making.

-- Will Dormann (2015), Carnegie Melon Software Engineering Institute CERT/CC Blog