HTTPS deployment is on an upward trajectory, and this growth is accompanied by the increasing HTTPS interception and SSL inspection by enterprise-grade firewalls, web filters, gateways, as well as client-side antivirus and security solutions.
These solutions have to be able to terminate TLS sessions so that they could analyze the inner HTTP plaintext traffic to spot threats and filter content. But, are the new TLS connections they initiate to encrypt the traffic again and forward it to the destination safe?
