Full Disclosure mailing list archives
Re: Decrypting SSL for Network Monitoring
From: coderman <coderman () gmail com>
Date: Tue, 28 Jun 2011 20:24:39 -0700
On Tue, Jun 28, 2011 at 9:09 AM, Adam Behnke <adam () infosecinstitute com> wrote:
InfoSec Institute resources author Alec Waters gives you step by step instructions on how to decrypt SSL for network monitoring: ... Your thoughts?
using the ssl observatory to pre-generate useful certs and a hardware security module to offload the RSA/DSA handshakes coupled to an i7 with AES-NI for payload transport is even better. like the sugar frosting on top of these crunchy flakes that are part of your nutritional breakfast! YMMV. something tells me *this will be a hot topic this summer, either with your complicit or exploitive support... :o [ where "this" == SSL MITM FTW. where "complicit" == ca-root-on-demand-by-policy, where "exploitive" == ca-root-on-my-demand-by-because-i-said-so, where explanations == getting tedious... ] _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Decrypting SSL for Network Monitoring Adam Behnke (Jun 28)
- Re: Decrypting SSL for Network Monitoring adam (Jun 28)
- Re: Decrypting SSL for Network Monitoring adam (Jun 28)
- Re: Decrypting SSL for Network Monitoring Michael Holstein (Jun 28)
- Re: Decrypting SSL for Network Monitoring coderman (Jun 28)
- Re: Decrypting SSL for Network Monitoring adam (Jun 28)