CISA warns that an HTTPS inspection product may negotiate deprecated protocol versions or weak ciphers with the upstream server while the user sees a strongly encrypted connection to the proxy.

Checked 2026-10-14

Vendor
CISA
Product
not restricted
Subsystem
TLS interception risk
Deployment
any
Region
not restricted
Release range
advisory dated 2017-03-16
Checked
2026-10-14

Sources

Cite this note

APA

WarmTransfer. (2026, October 14). Web proxies and TLS inspection that break UC clients: source note tls-inspection-uc-clients-cisa-weak-upstream-tls. WarmTransfer. https://warmtransfer.net/knowledge/claims/tls-inspection-uc-clients-cisa-weak-upstream-tls

BibTeX

@misc{warmtransfer-claim-tls-inspection-uc-clients-cisa-weak-upstream-tls,
  title  = {Web proxies and TLS inspection that break UC clients: source note tls-inspection-uc-clients-cisa-weak-upstream-tls},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/tls-inspection-uc-clients-cisa-weak-upstream-tls},
  note   = {Source note tls-inspection-uc-clients-cisa-weak-upstream-tls, checked 2026-10-14}
}

Read in context