Is it possible to read http2 unencrypted requests/packet data before it gets encrypted and send over the internet ?

[Greatz08]

i did asked LLM, it said http2 use HPACK to encrypt packet and writing an HPACK Decompressor inside an eBPF kernel program is impossible, so thought to ask about it here.

[scale03]

yo, maybe the llm misunderstood the question... is not possible to decode it in eBPF (Kernel), but is possible to capture it in eBPF and decode in BCC. You can try by hooking SSL_write with the kernel program, and hexdump it in the userspace. Technically should be possible.