This tab shows TLS connection details reported by the browser for the selected HTTPS request. The user interface uses the historical label “SSL,” but current connections normally use TLS 1.2 or TLS 1.3. The following items may be displayed:
These values describe the TLS peer observed by the browser. This is normally the origin server, but it can be an enterprise HTTPS-inspection gateway, antivirus product or debugging proxy. In that case the values describe the browser-to-interceptor connection, not the interceptor-to-origin connection. HttpWatch does not intercept or terminate TLS.
SSL Protocol
The secure-transport protocol and version reported by the browser, for example TLS 1.2 or TLS 1.3.
Public Key Exchange
The key-agreement or public-key algorithm reported for the connection. Key agreement establishes shared key material; it does not simply transfer a symmetric encryption key to the peer.
Public Key Size
The public-key size reported for the connection. Key sizes are meaningful only in the context of the algorithm and must not be compared directly across unrelated algorithms.
Encryption
The symmetric cipher or authenticated-encryption algorithm used to protect request and response data.
Encryption Key Size
The symmetric key size reported for the selected cipher. This value is only one factor in assessing a connection.
Server Authentication
The algorithm reported for authenticating the TLS peer using its certificate.
MAC
The Message Authentication Code (MAC), or AEAD integrity mechanism, reported for detecting modification of protected data.
HttpWatch also displays Strong, Medium or Weak classifications. These are implementation heuristics for individual reported fields, not a complete security assessment or a guarantee that a connection is secure. Protocol deprecation, certificate validation, browser policy, endpoint configuration and other factors must also be considered.
Strong
The current HttpWatch classifier assigned its highest rating to this field.
Medium
The current classifier identified a legacy, deprecated or otherwise less-preferred field value.
Weak
The current classifier identified a field value with known serious weaknesses.