Chris Greer’s walkthrough on decrypting HTTPS traffic in Wireshark is one of those rare tutorials that makes a pretty intimidating topic feel surprisingly doable. He breaks down how TLS 1.3 session keys work, why you normally can’t peek inside encrypted packets, and how a simple environment variable on Windows lets you capture those keys right from your browser. It’s approachable, but still nerdy enough to scratch that packet‑analysis itch.
The core trick is setting the SSLKEYLOGFILE environment variable so Chrome writes out the session keys as it negotiates TLS. Once you’ve got that log file, Wireshark can use it to decrypt the encrypted streams in real time. Chris walks through the exact steps—Control Panel, Advanced System Settings, Environment Variables—and shows how to plug the keylog into Wireshark’s TLS preferences. If you’ve ever wanted to see what’s actually happening inside HTTPS without guessing, this is the cleanest path in.

