{"name":"network.tlsTerminate","slug":"network-tlsterminate","family":"setting","title":"Settings keys","noun":"settings key","description":"On Windows, TLS interception is skipped unless you supply both a CA cert and key path.","description_source":"entry","described_by":{"version":"2.1.221","anchor":"windows-sandbox-no-longer-attempts-tls-termination-without-c"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.304","anchor":"sandbox-proxy-caps-tls-terminated-tunnels-and-times-out-hand","heading":"Sandbox HTTPS interception now caps open connections and times out stalled ones","line":"With TLS termination on, the sandbox now allows 256 intercepted connections at once and closes those not set up within 10 seconds","released_at":"2026-10-19 19:47:15","reason":"found in this entry's text, named in this entry"},{"version":"2.1.268","anchor":"experimental-in-process-tls-termination-and-upstream-parent","heading":"Experimental in-process TLS termination and upstream parent-proxy support added to sandbox network config","line":"Sandbox can now terminate HTTPS itself and route traffic through an upstream proxy, both experimental","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text, named in this entry"},{"version":"2.1.221","anchor":"windows-sandbox-no-longer-attempts-tls-termination-without-c","heading":"Windows sandbox no longer attempts TLS termination without CA material","line":"On Windows, TLS interception is skipped unless you supply both a CA cert and key path.","released_at":"2026-08-03 22:16:25","reason":"named in this entry, found in this entry's text"},{"version":"2.1.140","anchor":"experimental-tls-termination-for-sandbox-runtime-experimenta","heading":"Experimental TLS Termination for Sandbox Runtime [EXPERIMENTAL]","line":null,"released_at":"2026-05-12 19:50:28","reason":"found in this entry's text"}],"entries_total":4,"docs":[{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"server-managed-settings","title":"Configure server-managed settings","documented":false},{"source":"claude-code","path":"settings","title":"Claude Code settings","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false}],"docs_total":5,"gates":[],"related":[{"name":"network.allowLocalBinding","slug":"network-allowlocalbinding","description":"On Windows, Claude Code has a new sandbox error for when `network.allowLocalBinding` disagrees with the loopback mode set up at the start"},{"name":"network.parentProxy","slug":"network-parentproxy","description":"Sandbox can now terminate HTTPS itself and route traffic through an upstream proxy, both experimental"},{"name":"networkAllowHosts","slug":"networkallowhosts","description":"Permission prompts can now show the list of network-allowed hosts for a pending command"},{"name":"networkPath","slug":"networkpath","description":"Reads outside your working directories can be made to fail closed, with a prompt option that persists the setting."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/network-tlsterminate","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}