Re:The Agent2Agent Protocol (A2A)
by Maxious on Wednesday April 09, 2025 @03:58PM
(#43637080)
even the approach that charles takes for intercepting TLS traffic is a bit old school (proxies, fake root certs etc.) - cool kids use eBPF https://mitmproxy.org/posts/local-capture/linux/
[ Parent
| on HN ]
I can see how you don't need a proxy any more, but I don't see how you can bypass TLS without fake root certs, even with eBPF.
Re:The Agent2Agent Protocol (A2A)
by Tokumei-no-hito on Wednesday April 09, 2025 @08:44PM
(#43639519)
new to this program as well but looks really nice.
i think it is still a proxy though unless I’m missing something (beyond the name lol).
[here's a section on macos dealing with certs](https://mitmproxy.org/posts/local-capture/macos/)
Re:The Agent2Agent Protocol (A2A)
by beaugunderson on Thursday April 10, 2025 @02:13AM
(#43641159)
here is one example: https://github.com/gojue/ecapture
in short, you can hook calls within SSL libraries (like OpenSSL)
Sure, but that very much depends on the application, no? What if it's statically linked its SSL lib?
Re:The Agent2Agent Protocol (A2A)
by beaugunderson on Thursday April 10, 2025 @05:08AM
(#43642120)
you wanted to know how people are bypassing the need for a certificate with eBPF, that is how