Take the 2-minute tour ×
Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. It's 100% free, no registration required.

I am actually trying to debug all the traffic going in and out on my phone. I am using Fiddler on my PC, and ProxyDroid on my phone to do this. HTTP traffic works fine. I am able to decrypt it completely. However, with HTTPS traffic, all I get is "Tunnel to : xxx.xxx.xx.xxx:443 ". Any idea how do I decrypt the traffic going through the HTTPS route?

I installed the FiddlerRoot.cer on my phone through the default browser. Still no luck on decrypting the HTTPS traffic.

P.S : I am talking about traffic from apps, and not through the browser. My Phone is running ICS and is rooted.

share|improve this question
3  
Humm... I always thought the "S" in "HTTPS" stands for "secure". So the idea behind that is that you should not be able to easily decrypt it -- it is encrypted for good reason. –  Izzy Feb 11 '13 at 14:23
1  
HTTPS is for protecting against a man in the middle attack... which is what it sounds like you're trying to do. See: en.wikipedia.org/wiki/Man-in-the-middle_attack and stackoverflow.com/questions/2888884/… and stackoverflow.com/questions/3075489/… etc –  Bryan Denny Feb 11 '13 at 15:00
    
Yes, I am exactly trying to do that. Using Fiddler, we can decrypt the HTTPS traffic. Read here --> fiddler2.com/fiddler/help/httpsdecryption.asp . Its easy to do this for browsers on the pc or phones etc. But I am trying to accomplish this for an App on my phone. –  Ubaid Feb 12 '13 at 7:43
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.