I have a question regarding https/tls. Lets say a client requests a website from a server via https. The client stores the entire traffic and his secrets to disk. Can i afterwards verify the authenticity of the data in the recording?
To my understanding after the initial key exchange (which is signed by the server certificate) the client and server use the same keys for synchronous encryption and hmac calculation. Thus a malicious client can afterwards (before storing the conversation to disk) generate a fake response and encrypt it with the same key the server would have used.
Is my assumption correct?