Fiddler Ideas
The free web debugging proxy for any browser, system or platform.
The free web debugging proxy for any browser, system or platform.
The free web debugging proxy for any browser, system or platform.
I came across an article describing how Wireshark is able to decrypt SSL encrypted network traffic by making use of a feature in Mozilla Firefox and Google Chrome: If a system environment variable named SSLKEYLOGFILE is set to a valid filename, those browsers will write SSL key data to the file. Wireshark, in turn, uses to the contents of the file to decrypt SSL encrypted packets that it captures.
Assuming it's technically possible, it would be great if Fiddler could do the same as an alternative to use the Fiddler Root certificate.
Dan Stevens
fiddler make a new conection when used as a proxy, and this make false results sometimes,while the wireshark method does not touch the conexion. SSLKEYLOGFILE is a must, curl too support it now. please add it. thank you
I agree that this would be a very valuable enhancement. The current approach with Fiddler acting as a man-in-the-middle for example doesn't work if the server uses HSTS.
Dan,is there something that bothers you in the certificates approach?
It's a huge amount of code for very questionable benefit, but it's potentially possible.