In this vein, does anyone know if there has been any thoughts toward
creating a plug-in of sorts that would let Firefox and / or IE
communicate their fancy decrypted packets into some form that
Wireshark could read?
I've wondered why there isn't something to take the pretty formatted
data you get with Httpfox and save some sort of pcap information from
it.
-Jason
On Wed, Nov 18, 2009 at 11:48 AM, Sake Blok <> wrote:
>> In the situations where I wont have access or be able to get the .der and
>> .pem files, is there a way that I can decode SSL traffic when I am the
>> endpoint (client) of a ssl communication with a server ?
>
> Then network traces won't help you (luckily). What you could do is use
> Firefox with the httpfox plugin. It won't give you decrypted network
> traffic, but it does give you all the objects of the page in decrypted
> form (as it sits between the SSL decrypter and the page renderer). If
> you combine this with a network trace with the encrypted traffic, you
> have quite a good view on what's happening...
>
> Hope this helps,
> Cheers,
>
>
> Sake
>
> PS For IE, there is httpwatch, which is what httpfox is trying to
> mimic, but it needs a license.
