Differences

This shows you the differences between two versions of the page.

--- networking:quic [2025/08/24 21:51] – bstafford
+++ networking:quic [2025/08/29 13:16] (current) – bstafford
@@ Line 1: / Line 1: @@
 ====== QUIC ======
+===== Against Decrypting =====
+Intersting thoughts from reddit [[https://www.reddit.com/r/paloaltonetworks/comments/1n310di/comment/nbas6vm/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button|here]] on why decrypting QUIC is almost pointless.
+What's your use case for QUIC Decryption? As of today decrypting QUIC only works with Firefox since Google / Chromium opted for not supporting MiTM for QUIC. SPKI Validation can be disabled in Chromium with the ignore-certificate-errors-spki-list flag but to operationalize QUIC Decryption you would need to manage all Chromium Based Browsers on the endpoint... including all the pseudo Web Apps that use headless Chromium (atleast if those instances implement QUIC for whatever reason).
+I would not consider it a gap since it's not very feasible to operationalize QUIC Decryption as of today.
+===== Block or Decrypt QUIC =====
 Interesting thoughts from reddit [[https://www.reddit.com/r/paloaltonetworks/comments/1mtwak3/comment/n9gy3j5/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button|here]] (user: VeryStrongBoi)