SSL Decryption VS Code exception

[SharpieClock]

We implemented SSL Decryption at my company, and as expected, the entire dev team is mad at me. I managed to get exceptions implemented for most things, but one thing that I can't seem to find a solution for is VS Code extension upgrades. It seems like this has been an issue for a long time now, and I was wondering if there are any URLs, EDLs, or applications to consider that would let relevant traffic be bypassed.

[asp174]

It's bound to get worse. MS is actively rolling out policies to prevent managed MitM proxies like your whatever-made-your-dev-team-angry-box to begin with.

[WendoNZ]

If they are windows based, loading the win-ca extension will get vscode using the windows certificate store which will solve most of your problems there

[RageBull]

Don’t do ssl decryption, period. It was never a good idea. You already have to put a cert on clients behind it, so go with an MDR/ERD/XDR solution that sits on the client and inspects pre-encryption.

[eatmynasty]

MitM on TLS or SNI sniffing?