Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I ahve an application that is submitting and recieving information via HTTPS. If I place wireshark on the same box and the client. Will I be able to decrypt all of the data within the communication with Wireshark? Do I need a plugin?

share|improve this question
add comment

1 Answer 1

Wireshark will be able to decrypt the data only if the RSA key of the SSL certificate is provided to it. If the web site is not under your control, you don't have the key, therefore cannot decrypt the data.

You have other options to intercept and decrypt the traffic, though, if you can set up a transparent proxy that does man-in-the-middle attack on the encrypted traffic (and if the software in question does not verify the SSL certificate).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.