On Feb 28, 2025, at 8:12 AM, Shibo Zhou <shibo...@cs.cmu.edu> wrote:
> I hope this email finds you well. As we know, wireshark is a network protocol
> analyzer,
Yes.
> and it does not have the ability to decrypt encrypted communications.
No.
It has the ability to decrypt at least *some* encrypted communications *if*
sufficient additional information is supplied.
It can decrypt, for example, some forms of Wi-Fi encryption if keys are
provided, and it can decrypt some forms of TLS encryption if the required
information is provided.
https://wiki.wireshark.org/HowToDecrypt802.11
https://wiki.wireshark.org/ESP_Preferences
https://wiki.wireshark.org/TLS#tls-decryption
> Major social media platforms, like facebook or Wechat, use robust encryption
> methods to ensure that the content of messages remains secured and unreadable
> by network analysis tools like Wireshark.
They should be unreadable *if* various private information isn't provided or
*if* Wireshark doesn't include code to decrypt it using that private
information.
Facebook and Instagram, as in "Meta's Web sites where you can post stuff" are
using TLS, which *can* be decrypted by Wireshark, in some cases, if enough
information is provided.
Other services, such as WeChat or WhatsApp, may use other encryption mechanisms
for which Wireshark currently doesn't include decryption support.
_______________________________________________
Wireshark-dev mailing list -- wireshark-dev@wireshark.org
To unsubscribe send an email to wireshark-dev-le...@wireshark.org
