I have a question regarding https/tls. Lets say a client requests a website from a server via https. The client stores the entire traffic and his secrets to disk. Can i afterwards verify the authenticity of the data in the recording?

To my understanding after the initial key exchange (which is signed by the server certificate) the client and server use the same keys for synchronous encryption and hmac calculation. Thus a malicious client can afterwards (before storing the conversation to disk) generate a fake response and encrypt it with the same key the server would have used.

Is my assumption correct?


Your assumption is correct; after the initial key exchange, everything is done with symmetric encryption. As the client has the symmetric keys, he can create any transcript he wants, and figure out how it would be encrypted and integrity protected.

TLS was designed to do secure communication; nonrepudiable transcripts were never a design goal.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy