CISA recommends verifying that an HTTPS inspection product validates certificate chains and passes errors to clients, for example by testing with badssl.com, and weighing the risks before deploying HTTPS inspection.

Checked 2026-10-14

Vendor
CISA
Product
not restricted
Subsystem
TLS interception risk
Deployment
any
Region
not restricted
Release range
advisory dated 2017-03-16
Checked
2026-10-14

Sources

Cite this note

APA

WarmTransfer. (2026, October 14). Web proxies and TLS inspection that break UC clients: source note tls-inspection-uc-clients-cisa-badssl-test. WarmTransfer. https://warmtransfer.net/knowledge/claims/tls-inspection-uc-clients-cisa-badssl-test

BibTeX

@misc{warmtransfer-claim-tls-inspection-uc-clients-cisa-badssl-test,
  title  = {Web proxies and TLS inspection that break UC clients: source note tls-inspection-uc-clients-cisa-badssl-test},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/tls-inspection-uc-clients-cisa-badssl-test},
  note   = {Source note tls-inspection-uc-clients-cisa-badssl-test, checked 2026-10-14}
}

Read in context