HTTPS Interception Weakens TLS Security (TA17-075A)

Publisher

CISA (US-CERT)

URL

https://www.cisa.gov/news-events/alerts/2017/03/16/https-interception-weakens-tls-security

Published

2017-03-16

Updated

unknown

Accessed

2026-10-14

HTTP status

200

License

US government work (public domain in the US); public domain; still cite with locator

Source notes citing this source

• CISA recommends verifying that an HTTPS inspection product validates certificate chains and passes errors to clients, for example by testing with badssl.com, and weighing the risks before deploying HTTPS inspection. in context
• CISA reports that many HTTPS interception products do not properly verify the server's certificate chain before re-encrypting traffic, and seldom forward chain-verification errors to the client. in context
• CISA states that behind an HTTPS interception product, the client can only verify the connection between itself and the interception product, not the connection to the real server. in context
• CISA warns that an HTTPS inspection product may negotiate deprecated protocol versions or weak ciphers with the upstream server while the user sees a strongly encrypted connection to the proxy. in context

Cite this source record

APA

WarmTransfer. (2017, March 16). HTTPS Interception Weakens TLS Security (TA17-075A). WarmTransfer. https://warmtransfer.net/knowledge/sources/cisa-ta17-075a-https-interception

BibTeX

@misc{warmtransfer-cisa-ta17-075a-https-interception,
  title  = {HTTPS Interception Weakens TLS Security (TA17-075A)},
  author = {{WarmTransfer}},
  year   = {2017},
  url    = {https://warmtransfer.net/knowledge/sources/cisa-ta17-075a-https-interception},
  note   = {CISA (US-CERT), accessed 2026-10-14}
}