# Decrypting traffic using a proxy

**URL:** <https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341>\
**Category:** Q&A\
**Tags:** appstore-fire-device\
**Created:** [June 11, 2024, 9:18pm UTC](https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341 "2024-06-11T21:18:55Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Charles\_Wheeler](https://avatars.discourse-cdn.com/v4/letter/c/b5a626/32.png) [@Charles\_Wheeler](https://community.amazondeveloper.com/u/Charles_Wheeler)\
**Post date:** [June 11, 2024, 9:18pm UTC](https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341/1 "2024-06-11T21:18:55Z")

</div>

I work as a QA tester for a game company, and we want to know that applications are hitting the right services and sending the right data. We are not trying to hack or decrypt anyone else’s traffic.

I (and some of the other testers) have recently acquired newer Fire HD tablets that come with (or auto-update to) FireOS 8.x. Once updated to FireOS 8, the usual task of sending the device’s traffic through a network proxy, does not produce the decrypted traffic that we need for our testing. The same procedure worked fine in Fire OS 7 (like I have on my 9th gen HD10), but does not work on 8.

Is there a setting or option that I am missing with regards to the procedure of authorizing the certificate? Something that is specific to FireOS, since my actual Android devices (11, 12, and now 14) work just fine with the proxy?

---

<div class="post-metadata">

**Author:** ![Emma](https://dhm3gbtzu79o6.cloudfront.net/user_avatar/community.amazondeveloper.com/emma/32/880_2.png) [@Emma](https://community.amazondeveloper.com/u/Emma)\
**Post date:** [June 13, 2024, 7:50am UTC](https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341/3 "2024-06-13T07:50:28Z")

</div>

Hi Charles,

Thanks for posting. Could you please answer the following questions:

1. Is the tablet unable to send any data, or can it send data but with encrypted data?
2. What are the test steps you use on FOS7 tablets?

---

<div class="post-metadata">

**Author:** ![Charles\_Wheeler](https://avatars.discourse-cdn.com/v4/letter/c/b5a626/32.png) [@Charles\_Wheeler](https://community.amazondeveloper.com/u/Charles_Wheeler)\
**Post date:** [June 13, 2024, 7:56pm UTC](https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341/5 "2024-06-13T19:56:18Z")

</div>

1. When the device is connected to the proxy, but not attempting to decrypt the traffic, connection is fine and everything behaves as expected. When I enable SSL decryption (of sites that we own), the proxy will throw errors for those URLs, and communication to the device will be blocked. The specific error (from the proxy) is: `SSL handshake with client failed: An unknown issue occurred processing the certificate (certificate_unknown)`

2. On Device: Download the certificate to the device; In the Credential Storage, Install from SD Card, and install it as a CA certificate.  
In our application: Add the appropriate domains to the network\_security\_config.xml file, and build that into the application.

---

<div class="post-metadata">

**Author:** ![Emma](https://dhm3gbtzu79o6.cloudfront.net/user_avatar/community.amazondeveloper.com/emma/32/880_2.png) [@Emma](https://community.amazondeveloper.com/u/Emma)\
**Post date:** [June 14, 2024, 7:04am UTC](https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341/6 "2024-06-14T07:04:25Z")

</div>

Thanks for providing further information. We have messaged the appropriate team for further investigation and will let you know once we receive an update.

---

<div class="post-metadata">

**Author:** ![Charles\_Wheeler](https://avatars.discourse-cdn.com/v4/letter/c/b5a626/32.png) [@Charles\_Wheeler](https://community.amazondeveloper.com/u/Charles_Wheeler)\
**Post date:** [July 18, 2024, 5:45pm UTC](https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341/7 "2024-07-18T17:45:47Z")

</div>

Any update on this, as it’s been a month?

---

<div class="post-metadata">

**Author:** ![Moses](https://dhm3gbtzu79o6.cloudfront.net/user_avatar/community.amazondeveloper.com/moses/32/524_2.png) [@Moses](https://community.amazondeveloper.com/u/Moses)\
**Post date:** [October 12, 2025, 9:27am UTC](https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341/8 "2025-10-12T09:27:42Z")

</div>

Hi Charles,

Thanks for your patience, sorry for the late reply. Are you still having trouble with this issue?

Moses

---

<div class="post-metadata">

**Author:** ![system](https://dhm3gbtzu79o6.cloudfront.net/user_avatar/community.amazondeveloper.com/system/32/5065_2.png) [@system](https://community.amazondeveloper.com/u/system)\
**Post date:** [October 26, 2025, 9:28am UTC](https://community.amazondeveloper.com/t/decrypting-traffic-using-a-proxy/5341/9 "2025-10-26T09:28:29Z")

</div>

Closed on October 26, 2025, 9:28am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
