Stop Inspecting Everything: The Case Against Universal TLS Interception
For the past decade, I've watched enterprise security teams deploy TLS inspection appliances with the best of intentions. The pitch is always the same: we need visibility into encrypted traffic to...