RE: Security tool for monitoring HTTPS traffic?

You could, provided you know the session key and an utility like ssldump

Satish

-----Original Message-----
From: John Reilly [mailto:JReilly@xxxxxxxxxxxx]
Sent: Wednesday, February 25, 2004 3:49 PM
To: webappsec@xxxxxxxxxxxxxxxxx
Subject: RE: Security tool for monitoring HTTPS traffic?




> I have a similar question too!
> 
> Are they products they can look inside HTTPS traffic? Some 
> customers doesn't
> trust HTTPS traffic going inside the company over the proxy! 

There is no way to look at the plain text content inside the https traffic -
that would defeat the whole purpose of https.  

Regards,
John