Frage

I am using Linux/Wireshark to capture http traffic and it's working great. Now i want to capture some AJAX calls from https://plus.google.com, but in this case I am not able to see any simple data.

I saw some articles and confused, Can someone explain, what steps should I follow to get the desired results?

War es hilfreich?

Lösung

In order to be able to decrypt HTTPS traffic, you need the server private key. As you have no way of getting Google's private key for plus.google.com, there is no way to decrypt the captured traffic.

In addition to having the private key, the TLS transaction must not be using Perfect Forward Secrecy.

Lizenziert unter: CC-BY-SA mit Zuschreibung
Nicht verbunden mit StackOverflow
scroll top