Re: Browser traffic interception/inspection (was: how2 format a flash drive)

From	Lee <ler762@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: Browser traffic interception/inspection (was: how2 format a flash drive)
Date	2024-07-01 03:40 +0200
Message-ID	<IVebn-6Og5-1@gated-at.bofh.it> (permalink)
References	<ITkkV-5z1z-3@gated-at.bofh.it> <ITnLP-5Bqc-5@gated-at.bofh.it> <IUJqV-6tMD-1@gated-at.bofh.it> <IUNbc-6wz8-17@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi,

On Sat, Jun 29, 2024 at 4:45 PM Jeffrey Walton wrote:
>
> On Sat, Jun 29, 2024 at 4:13 PM Lee wrote:
> >
> > [...] Debian firefox does NOT allow one to do
> > TLS intercept - ie. this does not work:
> > C:\UTIL>cat firefox-tlsdecode.bat
> > set SSLKEYLOGFILE=C:\Users\Lee\AppData\Local\Temp\FF-SSLkeys.txt
> > start C:\"Program Files\Firefox\Firefox.exe"
> >
> > @rem wireshark:
> > @rem   edit / preferences
> > @rem   protocols / tls  (v2.6: protocols / ssl)
> > @rem     paste SSLKEYLOGFILE filename into (Pre)-Master-Secret log
> > filename (was SSL debug file entry)
>
> I'm not sure who your complaint is against -- Debian, Firefox or
> Linux. I'm also not sure that it is a valid complaint.

It is 100% a valid complaint.  And it's a complaint against Debian
because they're the ones that turned off that functionality.
They have <reasons>, I disagree, I'm free to build Firefox for myself,
get somebody else to doit for me, or get it somewhere else.

  ... which is the downside of free software.  Technically, yes, I'm
free to build the software with whatever I want enabled, with whatever
changes I want added/deleted.
In practice, my ability to build Firefox is .. lacking :(

> Firefox uses its own certificate store. If you want to proxy your
> traffic, then the proxy's root cert needs to be in Mozilla's
> certificate store. See
> <https://support.mozilla.org/en-US/kb/setting-certificate-authorities-firefox>.

Right.  I have privoxy & occasionally do set it for +https-inspection
when I want it to inspect/modify web traffic.

> Chrome is different.

I've never used Chrome & don't intend to.

> When you are intercepting/inspecting traffic, you typically setup your
> proxy, and then proxy Firefox and Chrome traffic through your proxy.
> The proxy can run on your local machine, like 127.0.0.1. Your proxy's
> root certificate should be in the browser's store (as described
> above).

Or you can tell firefox to write the SSL key info to a file that
wireshark can read & then decrypt the traffic.
For example
  https://everything.curl.dev/usingcurl/tls/sslkeylogfile.html

Best Regards,
Lee

Thread

how2 format a flash drive Lee <ler762@gmail.com> - 2024-06-25 16:00 +0200
  Re: how2 format a flash drive "Thomas Schmitt" <scdbackup@gmx.net> - 2024-06-25 16:30 +0200
    Re: how2 format a flash drive David Wright <deblis@lionunicorn.co.uk> - 2024-06-25 16:50 +0200
      Re: how2 format a flash drive "Thomas Schmitt" <scdbackup@gmx.net> - 2024-06-25 18:30 +0200
        Re: how2 format a flash drive "Thomas Schmitt" <scdbackup@gmx.net> - 2024-06-25 18:50 +0200
      Re: how2 format a flash drive eben@gmx.us - 2024-06-25 19:20 +0200
        Re: how2 format a flash drive David Wright <deblis@lionunicorn.co.uk> - 2024-06-26 01:00 +0200
    Re: how2 format a flash drive Lee <ler762@gmail.com> - 2024-06-25 21:40 +0200
  Re: how2 format a flash drive Joe <joe@jretrading.com> - 2024-06-25 17:50 +0200
    Re: how2 format a flash drive Hans <hans.ullrich@loop.de> - 2024-06-25 18:50 +0200
      Re: how2 format a flash drive Lee <ler762@gmail.com> - 2024-06-26 01:30 +0200
    Re: how2 format a flash drive Lee <ler762@gmail.com> - 2024-06-25 21:50 +0200
      Re: how2 format a flash drive eben@gmx.us - 2024-06-25 22:20 +0200
      Re: how2 format a flash drive George at Clug <Clug@goproject.info> - 2024-06-26 01:30 +0200
        Re: how2 format a flash drive sd@swampdog.co.uk - 2024-06-27 15:30 +0200
        Re: how2 format a flash drive Lee <ler762@gmail.com> - 2024-06-29 18:50 +0200
          Re: how2 format a flash drive Dan Ritter <dsr@randomstring.org> - 2024-06-29 19:40 +0200
            Re: how2 format a flash drive Lee <ler762@gmail.com> - 2024-07-01 04:40 +0200
              Re: how2 format a flash drive jeremy ardley <jeremy.ardley@gmail.com> - 2024-07-01 07:50 +0200
                Re: how2 format a flash drive Lee <ler762@gmail.com> - 2024-07-01 15:10 +0200
                Re: how2 format a flash drive <tomas@tuxteam.de> - 2024-07-01 15:50 +0200
                Re: how2 format a flash drive jeremy ardley <jeremy.ardley@gmail.com> - 2024-07-01 21:30 +0200
                Re: how2 format a flash drive Stefan Monnier <monnier@iro.umontreal.ca> - 2024-07-02 05:50 +0200
                Re: how2 format a flash drive gene heskett <gheskett@shentel.net> - 2024-07-02 06:10 +0200
                Re: how2 format a flash drive <tomas@tuxteam.de> - 2024-07-02 06:40 +0200
                Re: how2 format a flash drive George at Clug <Clug@goproject.info> - 2024-07-02 06:50 +0200
                Re: how2 format a flash drive Jeffrey Walton <noloader@gmail.com> - 2024-07-02 10:20 +0200
                Telemetry, data hoarding [was: how2 format a flash drive] <tomas@tuxteam.de> - 2024-07-02 10:30 +0200
                Re: how2 format a flash drive jeremy ardley <jeremy.ardley@gmail.com> - 2024-07-02 11:20 +0200
                Re: how2 format a flash drive John Hasler <john@sugarbit.com> - 2024-07-02 17:20 +0200
                Re: how2 format a flash drive Lee <ler762@gmail.com> - 2024-07-02 10:30 +0200
                Re: how2 format a flash drive jeremy ardley <jeremy.ardley@gmail.com> - 2024-07-02 11:30 +0200
                Re: how2 format a flash drive Lee <ler762@gmail.com> - 2024-07-02 22:40 +0200
          Browser traffic interception/inspection (was: how2 format a flash drive) Jeffrey Walton <noloader@gmail.com> - 2024-06-29 22:50 +0200
            Re: Browser traffic interception/inspection Max Nikulin <manikulin@gmail.com> - 2024-06-30 03:40 +0200
              Re: Browser traffic interception/inspection Jeffrey Walton <noloader@gmail.com> - 2024-06-30 08:00 +0200
                Re: Browser traffic interception/inspection Max Nikulin <manikulin@gmail.com> - 2024-06-30 17:40 +0200
                Re: Browser traffic interception/inspection Lee <ler762@gmail.com> - 2024-07-01 09:00 +0200
                Re: Browser traffic interception/inspection Max Nikulin <manikulin@gmail.com> - 2024-07-01 17:10 +0200
                Re: Browser traffic interception/inspection Lee <ler762@gmail.com> - 2024-07-07 23:50 +0200
                Re: Browser traffic interception/inspection Max Nikulin <manikulin@gmail.com> - 2024-07-08 04:40 +0200
                Re: Browser traffic interception/inspection Lee <ler762@gmail.com> - 2024-07-08 16:30 +0200
            Re: Browser traffic interception/inspection (was: how2 format a flash drive) Lee <ler762@gmail.com> - 2024-07-01 03:40 +0200
              Re: Browser traffic interception/inspection (was: how2 format a flash drive) Jeffrey Walton <noloader@gmail.com> - 2024-07-01 03:50 +0200
                Re: Browser traffic interception/inspection (was: how2 format a flash drive) Jeffrey Walton <noloader@gmail.com> - 2024-07-01 07:50 +0200
          Re: how2 format a flash drive Keith Bainbridge <keithrbau@gmail.com> - 2024-06-30 08:20 +0200
          Re: how2 format a flash drive Jeffrey Walton <noloader@gmail.com> - 2024-07-01 08:00 +0200
  Re: how2 format a flash drive Marc SCHAEFER <schaefer@alphanet.ch> - 2024-07-06 17:50 +0200

csiph-web