this might be a dumb question…
I wrote a C++ client program that communicates with a web service over HTTPS with the help of the cURL library.
I am wondering if the person using the client can see clearly the traffic originating from his computer using some sniffing program?
Or would he see encrypted data?
Thanks!
Using a utility like
netcatto sniff data on the wire, the user would only see encrypted data. The only way to see the raw data is to log it inside the app, before it’s passed to cURL, OR to find it in the machine’s active RAM (much more difficult since it’s likely to be fragmented).