Hacker News new | ask | show | jobs
by alrlroipsp 1387 days ago
> If I install something like Wireshark, Fiddler or mitmproxy, will I be able to decrypt all HTTPS content flowing from my computer to the application server of interest?

Yes.

> If yes, then how to secure web traffic against such activity?

By uninstalling Wireshark, Fiddler or mitmproxy.

1 comments

> By uninstalling Wireshark, Fiddler or mitmproxy.

Well, I was interested in preventing others from sniffing the traffic. If I am the app owner or an app user, then anyone on the LAN or shared home network can sniff the traffic.

> I was interested in preventing others from sniffing the traffic.

Unless you let others access your mitmproxy setup, then you do not need to worry.