Editing Transport Layer Security (section)

===TLS interception===
{{See also|Server Name Indication#Encrypted Client Hello}}
TLS interception (or [[HTTPS]] interception if applied particularly to that protocol) is the practice of intercepting an encrypted data stream in order to decrypt it, read and possibly manipulate it, and then re-encrypt it and send the data on its way again. This is done by way of a "[[transparent proxy]]": the interception software terminates the incoming TLS connection, inspects the HTTP plaintext, and then creates a new TLS connection to the destination.<ref name="Durumeric et al 2017">{{cite journal|last1=Durumeric|first1=Zakir|last2=Ma|first2=Zane|last3=Springall|first3=Drew|last4=Barnes|first4=Richard|last5=Sullivan|first5=Nick|last6=Bursztein|first6=Elie|last7=Bailey|first7=Michael|last8=Halderman|first8=J. Alex|last9=Paxson|first9=Vern|title=The Security Impact of HTTPS Interception|journal=NDSS Symposium|date=5 September 2017|doi=10.14722/ndss.2017.23456|url=https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/security-impact-https-interception|isbn=978-1-891562-46-4|access-date=11 March 2019|archive-date=22 March 2019|archive-url=https://web.archive.org/web/20190322145041/https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/security-impact-https-interception/|url-status=live}}</ref>

TLS/HTTPS interception is used as an [[information security]] measure by network operators in order to be able to scan for and protect against the intrusion of malicious content into the network, such as [[computer virus]]es and other [[malware]].<ref name="Durumeric et al 2017"/> Such content could otherwise not be detected as long as it is protected by encryption, which is increasingly the case as a result of the routine use of HTTPS and other secure protocols.

A significant drawback of TLS/HTTPS interception is that it introduces new security risks of its own. One notable limitation is that it provides a point where network traffic is available unencrypted thus giving attackers an incentive to attack this point in particular in order to gain access to otherwise secure content. The interception also allows the network operator, or persons who gain access to its interception system, to perform [[man-in-the-middle attack]]s against network users. A 2017 study found that "HTTPS interception has become startlingly widespread, and that interception products as a class have a dramatically negative impact on connection security".<ref name="Durumeric et al 2017"/>