News for hackers. Stuff that matters.

A comment on Httptap: View HTTP/HTTPS requests made by any Linux program. Parent comment

Re:Httptap: View HTTP/HTTPS requests made by any Linux program by mdaniel on Monday February 03, 2025 @03:02PM (#42922209)
I don't know if it's a standard but I believe a lot of tls libraries honor the SSLKEYLOGFILE env-var https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,th...
[ Parent | on HN ]
Re:Httptap: View HTTP/HTTPS requests made by any Linux program by 2030ai on Monday February 03, 2025 @03:35PM (#42922704)
That seems like an unnecessary vulnerability waiting to happen.
[ Parent | on HN ]
Re:Httptap: View HTTP/HTTPS requests made by any Linux program by wruza on Tuesday February 04, 2025 @12:08AM (#42928262)
Can’t wait till they patch it away and we lose the ability to investigate our own https traffic.
[ Parent | on HN ]
Re:Httptap: View HTTP/HTTPS requests made by any Linux program by frogsRnice on Tuesday February 04, 2025 @06:44AM (#42931148)
At some point someone needs to take responsibility for allowing modification of environment variables via something dumb like http. Debugging interfaces are fine- we should expect more from developers.
[ Parent | on HN ]