Comment

Comment by precommunicator

> but the traffic itself was encrypted over HTTPS. This meant that even if one were to use a packet sniffing tool like Wireshark, you would not be able to find the raw token.

It's trivial to decrypt HTTPS with tools like Fiddler or Burp Suite, assuming this build in browser used system proxy and system certificates list.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton