Inspecting Claude Code’s Network Traffic with Linux Namespaces and MITM Proxying (Part 4)

🫧 Open on Bubbles In part 3 , we explored pulling hostnames from an encrypted session. In this post, we’ll crack some TLS. Decrypting HTTPS with a MITM proxy The hostname extraction helped us discover where scraping is launching from. WebFetch connects directly to target websites from your machine. But hostnames alone don’t reveal what Claude sends in those requests: the HTTP headers, the User-Agent string, the exact URL paths, or the response bodies it receives. To see the full content of Claude’s network