mitmproxy
An open-source interactive HTTPS man-in-the-middle proxy tool used to intercept, inspect, modify and replay network traffic. It is widely used in security research and API debugging.
Timeline (last 90 days)
Adding a dedicated option for a specific CA rather than a generic interface suggests that mitmproxy is taking a compliance-adaptation route.
The Hacker News discussion about mitmproxy's new --emudhra option received 352 points and 94 comments.
Most comments in the community discussion acknowledged the engineering value of the change, considering that it solves a real friction point in enterprise deployment.
Some security researchers worry that using commercial CA certificates for interception blurs the technical boundary between legitimate proxying and man-in-the-middle attacks, and that responsibility for certificate revocation and breach response is unclear.
The latest mitmproxy commit adds a --emudhra option for performing TLS interception using certificates issued by eMudhra.
mitmproxy's regular workflow relies on a self-signed CA, requiring manual installation of the root certificate into the target device or browser trust store.
The operating system certificate store is injected by enterprises with internal CA and proxy interception tool root certificates through group policy, MDM, or manual installation.
Assessing the credibility of privacy allegations typically requires technical evidence such as network traffic packet capture analysis, static/dynamic code analysis, and independent third-party audit reports.
mitmproxy is an open-source proxy tool that supports HTTPS man-in-the-middle decryption and can be configured as a system proxy to capture and decrypt outbound HTTPS requests.
All Facts (10)
中间人代理（mitmproxy、Charles Proxy、Wireshark等）可用于抓包分析AI Agent发送给大模型的完整请求体和响应
90%Unverifiedmitmproxy's regular workflow relies on a self-signed CA, requiring manual installation of the root certificate into the target device or browser trust store.
50%UnverifiedThe Hacker News discussion about mitmproxy's new --emudhra option received 352 points and 94 comments.
50%UnverifiedMost comments in the community discussion acknowledged the engineering value of the change, considering that it solves a real friction point in enterprise deployment.
50%UnverifiedSome security researchers worry that using commercial CA certificates for interception blurs the technical boundary between legitimate proxying and man-in-the-middle attacks, and that responsibility for certificate revocation and breach response is unclear.
50%UnverifiedThe operating system certificate store is injected by enterprises with internal CA and proxy interception tool root certificates through group policy, MDM, or manual installation.
50%UnverifiedAssessing the credibility of privacy allegations typically requires technical evidence such as network traffic packet capture analysis, static/dynamic code analysis, and independent third-party audit reports.
50%Unverifiedmitmproxy is an open-source proxy tool that supports HTTPS man-in-the-middle decryption and can be configured as a system proxy to capture and decrypt outbound HTTPS requests.
50%UnverifiedAdding a dedicated option for a specific CA rather than a generic interface suggests that mitmproxy is taking a compliance-adaptation route.
50%UnverifiedThe latest mitmproxy commit adds a --emudhra option for performing TLS interception using certificates issued by eMudhra.
50%