Blog

mitmproxy and TLS decryption: debugging CORS headers on localhost API servers

Trust the mitm CA in your OS or browser to inspect OPTIONS and response headers byte-for-byte.

1 min read
mitmproxytlsdebugging

Workflow

Record flows to replay preflight storms after you change nginx or Envoy configs.

Compare upstream versus edge responses when a CDN strips headers.

Privacy

Redact Authorization headers in saved flows before sharing logs with vendors.

Rotate mitm CA yearly if your policy requires short-lived trust stores.

Back to blog