Skip to main content
All glossary terms

Credentials & security

TLS inspection

TLS inspection is the termination of an encrypted TLS connection by an intermediary so it can inspect or modify the protected application traffic. A client must trust the intermediary’s certificate authority for the inspected connection; inspection changes the end-to-end trust boundary and should be explicit.

Also known as TLS interception, SSL inspection.

Why it matters in practice

Hyperproxy uses TLS inspection for HTTPS placeholder substitution in Auto-Auth and HTTPS request-level rule evaluation in Firewall mode. Clients must trust the proxy CA for inspected connections in either mode. An opaque CONNECT tunnel cannot expose encrypted HTTP headers for rewriting; plain HTTP does not need TLS inspection.

Example

A test client trusts the proxy CA, establishes an inspected connection, and the proxy reads the request header before applying the selected mode.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.