It's 2018, and network middleware still can't handle TLS without breaking encryption

[silversurfer]

An academic study published last month shows that despite years worth of research into the woeful state of network traffic inspection equipment, vendors are still having issues in shipping appliances that don't irrevocably break TLS encryption for the end user.

The testing framework used by the Concordia University crew is available for download from here. More details are available in a research paper entitled "The Sorry State of TLS Security in Enterprise Interception Appliances."

Source: https://www.zdnet.com/article/its-2018-a...ncryption/