> On Mon, Jun 09, 2008 at 04:23:49PM -0400, Nik Kolev wrote:
> >
> > I saw a blog post somewhere discussing that you can "pass" the path
to
> > the file which stores the negotiated encryption key to wireshark and
> > (given that wireshark has been linked against a given library) get
the
> > encrypted payload decrypted. I don't know if this applies to my
scenario
> > (not sure whether IE writes the key to the file system,...)...
>
> With most ciphers (including the one that was chosen in the
> displayed server-hello), wireshark can do the decryption when it
> you supply the private key of the server (see the ssl protocol
> preferences).
[Nik Kolev] Aaaaaaa, I misread the post - thought that you can supply
the negotiated for the particular session key. But private key would
work as well - assuming the IT police at my company will hand it to
me...
Thanks for clarifying things,
-nik