Don't require HTTPS Decryption about fiddlercert HOT 3 CLOSED

A tunnel is a Decrypting tunnel if it's using HTTPS. It's a BlindTunnel if Fiddler is just shuffling bytes back and forth-- note that beyond HTTPS, I'm pretty sure WebSocket traffic can be going through a BlindTunnel too (if you don't have message parsing enabled).

So, you can write things like this:
if (oS.isAnyFlagSet(SessionFlags.IsWebSocketTunnel | SessionFlags.IsBlindTunnel | SessionFlags.IsDecryptingTunnel)) {

from fiddlercert.

OK, my previous assumptions were wrong.

The issue I am running into is when "Capture HTTPS CONNECTs" is checked but "Decrypt HTTPS traffic" is not. It appears that in these circumstances, Fiddler does not fire the FiddlerApplication.OnValidateServerCertificate.

That makes sense - Fiddler shouldn't need to validate the certificate if it is just acting as a dumb pipe. It should be possible to capture the certificate from the Server Hello, however. Is there a way to do this in Fiddler?

from fiddlercert.

It should be possible to capture the certificate from the Server Hello, however. Is there a way to do this in Fiddler?

Not presently, no. FiddlerCore has an OnReadResponseBuffer event but this isn't called by Fiddler for performance reasons.

from fiddlercert.