rsa - Whether Network Admin will be able to see my request even in the TLS configured area -


i have configured web application tls 1.0. requests going in encrypted format through out channel, secured man in middle attack. tls working on rsa mechanism, doubt if network admin (having private key) able decrypt request or not.

first, system or network admin not have access private key if add hsm , configure web server use (see https://en.wikipedia.org/wiki/hardware_security_module).

secondly, many pfs cipher suites available tls 1.0 (see https://security.stackexchange.com/questions/74270/which-forward-secrecy-cipher-suites-are-supported-for-tls1-0-protocols), if accept such cipher suites on web server, can capture communications , knows rsa private key not able decrypt content of channel: cipher key used protect channel ephemeral, not rsa private key.


Comments

Popular posts from this blog

html - How to set bootstrap input responsive width? -

javascript - Highchart x and y axes data from json -

javascript - Get js console.log as python variable in QWebView pyqt -