CISA states that behind an HTTPS interception product, the client can only verify the connection between itself and the interception product, not the connection to the real server.

Checked 2026-10-14

The client can only verify the connection between itself and the HTTPS interception product.
Vendor
CISA
Product
not restricted
Subsystem
TLS interception risk
Deployment
any
Region
not restricted
Release range
advisory dated 2017-03-16
Checked
2026-10-14

Sources

Cite this note

APA

WarmTransfer. (2026, October 14). Web proxies and TLS inspection that break UC clients: source note tls-inspection-uc-clients-cisa-client-sees-proxy-only. WarmTransfer. https://warmtransfer.net/knowledge/claims/tls-inspection-uc-clients-cisa-client-sees-proxy-only

BibTeX

@misc{warmtransfer-claim-tls-inspection-uc-clients-cisa-client-sees-proxy-only,
  title  = {Web proxies and TLS inspection that break UC clients: source note tls-inspection-uc-clients-cisa-client-sees-proxy-only},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/tls-inspection-uc-clients-cisa-client-sees-proxy-only},
  note   = {Source note tls-inspection-uc-clients-cisa-client-sees-proxy-only, checked 2026-10-14}
}

Read in context