Implications of bypassing encrypted traffic

1

I recently ran across this passage in the documentation, which implies that setting “encryption-handling: bypass” would make Heartbleed attacks invisible to Suricata.

I’m not very concerned about Heartbleed specifically, since a patch has been available for a long time. However, I’m curious about what other things might be missed with that setting enabled.

Are there other known attacks that would be made invisible by bypassing encryption handling?

2

Where did you read it would be invisible?

Since pattern matching on encrypted traffic does not make much sense you can just bypass it or try to analyze on the raw data.