Decrypting TLS Browser Traffic with Wireshark

Re:Decrypting TLS Browser Traffic with Wireshark by mdaniel on Thursday February 12, 2015 @11:52PM (#9042927)

What an amazing and scary tool (maybe those always go together). I now have a much deeper appreciation for why folks are afraid of Starbucks WiFi.

[ Parent | on HN ]

Re:Decrypting TLS Browser Traffic with Wireshark by notfoss on Friday February 13, 2015 @05:03AM (#9043639)

Any decent browser will display a certificate error for a Mitm attack. But yes, if you are using other programs/apps over an untrusted network, you can never be sure.

[ Parent | on HN ]

Re:Decrypting TLS Browser Traffic with Wireshark by ecesena on Friday February 13, 2015 @12:13PM (#9045401)

It's not actually about the WiFi, secure or not. I was in a WPA2 WiFi. I attacked my phone (at a higher network level), so unless there's an active IDS in place, you can't do much about it.

The issue is not the network, but the way the app continued over an insecure connection.

[ Parent | on HN ]