Fiddler Ideas

The free web debugging proxy for any browser, system or platform.

Decrypt only HTTPS traffic for specific process

If we can filter-out sessions by process, we should be able to only interfere (decrypt) HTTPS sessions for specific processes, without affecting other running processes.

We have the option to decrypt HTTPS traffic from browsers, non-browsers, or all processes... why cannot we decrypt traffic only for specific processes?

  • Guest
  • Feb 15 2018
  • Under review
  • Attach files
  • Eric Lawrence commented
    February 15, 2018 23:15

    https://www.fiddlerbook.com/fiddler/help/httpsdecryption.asp

    Click Rules > Customize Rules.

    Scroll to OnBeforeRequest. Inside, add:

    if (oSession.HTTPMethodIs("CONNECT") && oSession["X-PROCESSINFO"] && !oSession["X-PROCESSINFO"].StartsWith("appicareabout")) { 
        oSession["x-no-decrypt"] = "boring process";
    }