WebApp Sec: Re: Security tool for monitoring HTTPS traffic?

[Gary Flynn <flynngn () jmu edu>]

lists AT dawes DOT za DOT net wrote:

> The organisation is providing a service on their web server, and 
> consequently have a need/right to see the data in clear. In 
> particular, they may wish to do multiple things with the data, such as 
> performing IDS, tracking users, etc, apart from providing the service.
Very good point. NIDS/NIDP, deep inspection firewalls,
network based content management and rate limiting will all
go the way of the dodo as applications increasingly all start looking
like HTTPS unless the encryption border is in the network instead
of each individual host.