Unverified50% confidenceFactExact time
NetWatch supports decryption of TLS 1.3 and 1.2, provided that session keys are available, by pointing the client's SSLKEYLOGFILE to NetWatch, whereupon the plaintext is decoded in the Packets tab.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/19/2026
First Seen
Valid until: 12/18/2026
Sources
Related Entities
Related Claims
UnverifiedSSLKEYLOGFILE is an environment variable first introduced by NSS and later widely supported by mainstream TLS implementations; when a client program detects this variable, it writes session keys to a file in NSS Key Log format after the TLS handshake.68% similarVerifiedTLS encryption only protects transmission security between the user and the relay server; relay server operators can technically log all of a user's conversation content.64% similarUnverifiedLocalSend employs a self-signed certificate mechanism, where each device generates a key pair and self-signed TLS certificate on first run, achieving end-to-end encryption via TLS 1.2/1.363% similarUnverifiedCompared to TLS 1.2, TLS 1.3 simplifies the handshake process (reducing from 2-RTT to 1-RTT), removes insecure cipher suites, and enables forward secrecy by default62% similarVerifiedTLS encryption, on which HTTPS relies, only protects the transmission channel between two communication endpoints; in a relay proxy model, the relay server is the TLS session endpoint and can read plaintext request content after completing TLS termination.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/933610API
curl https://kongchang.com/api/v1/knowledge/claims/933610MCP
get_claim(id=933610)