4 ms·
Very good to know about. But you still have the problem of decrypting TLS traffic.
by alexflint 2y ago
Very good to know about. But you still have the problem of decrypting TLS traffic.
- mdaniel 2y agoI don't know if it's a standard but I believe a lot of tls libraries honor the SSLKEYLOGFILE env-var https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,the%20sslkeylogfile%20environment%20variable,-is%20set.%20To https://wiki.wireshark.org/TLS#:~:text=and%20curl%20when-,th...
- 2030ai 2y agoThat seems like an unnecessary vulnerability waiting to happen.
- frogsRnice 2y agoAt some point someone needs to take responsibility for allowing modification of environment variables via something dumb like http. Debugging interfaces are fine- we should expect more from developers.
- wruza 2y agoCan’t wait till they patch it away and we lose the ability to investigate our own https traffic.