Decryption rules for google ads traffic

[geeky01adarsh]

I tried capturing the data along with decryption mode using ssl keys generated through MiTM way.
What I found was while most of the traffic were decrypted, still all data from google ads traffic were encrypted.
Is there any way I can check for the validation of these data as well?

[emanuele-f]

Browser traffic or other apps? For browsers, root is not necessary while for other apps usually it is. See https://emanuele-f.github.io/PCAPdroid/tls_decryption#34-caveats-and-possible-solutions for more details. Apps from big companies will require specific methods to bypass protections. On the Internet you may find some useful info

[geeky01adarsh]

Hi @emanuele-f ,
I was trying to look through IMO SNS traffic and understand what data it shares with advertising agencies.
Is there any way I can export the keys to analyze them over WireShark or something, to have a better readability insight?

[emanuele-f]

The most convenient way is to use the PCAPng dump format, which includes both traffic and decryption keys in a single file. Otherwise you will have to export the SSLKEYLOG and load both it and the PCAP file in Wireshark.