Source note · Web proxies and TLS inspection that break UC clients
CISA reports that many HTTPS interception products do not properly verify the server's certificate chain before re-encrypting traffic, and seldom forward chain-verification errors to the client.
Checked 2026-10-14
- Vendor
- CISA
- Product
- not restricted
- Subsystem
- TLS interception risk
- Deployment
- any
- Region
- not restricted
- Release range
- advisory dated 2017-03-16
- Checked
- 2026-10-14
Sources
- HTTPS Interception Weakens TLS Security (TA17-075A) — CISA (US-CERT) · tier 1 standards and regulators · Description section
Cite this note
APA
WarmTransfer. (2026, October 14). Web proxies and TLS inspection that break UC clients: source note tls-inspection-uc-clients-cisa-chain-not-verified. WarmTransfer. https://warmtransfer.net/knowledge/claims/tls-inspection-uc-clients-cisa-chain-not-verified
BibTeX
@misc{warmtransfer-claim-tls-inspection-uc-clients-cisa-chain-not-verified,
title = {Web proxies and TLS inspection that break UC clients: source note tls-inspection-uc-clients-cisa-chain-not-verified},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/tls-inspection-uc-clients-cisa-chain-not-verified},
note = {Source note tls-inspection-uc-clients-cisa-chain-not-verified, checked 2026-10-14}
}