Fiddler helpfully offers to add a unique root CA certificate to intercept HTTPS traffic.
Once this certificate has been added, how do you go about removing it?
No it's not safe, and yes you should remove it. The entire point of it is to break the security of SSL for debugging convenience. It even has "DO_NOT_TRUST" in its name, for a good reason.
Either of two ways:
1) Disable HTTPS decryption and click the button titled "Remove Interception Certificates"
2) Open CertMgr.msc, open the Personal and Trusted Stores, and use the Delete key on the root.
Since Fiddler 4.6.1.5 the GUI is a bit different.
Go to Tools -> Fiddler Options -> HTTPS. Then click the "Actions" button and then "Reset All Certificates"
It will popup a message that it could take a while but it's really quick. Approve all popups and there you go.
Pay attention not to re-approve the certificate again (when I did it the message for approving the certificates popped up when I finished to approve all the popups.)
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With