How does Wireshark decrypt TLS network traffic?
A) with a key log file using per-session secrets
B) using an RSA public key
C) by observing DH key exchange
D) by defining a user-specified decode-as

Question

Quizplus · Accepted Answer

Wireshark can decrypt TLS traffic using a key log file that contains per-session secrets, which are generated by the client and server during the TLS handshake.

How Does Wireshark Decrypt TLS Network Traffic