A method comprising: generating (1-1, 1-2), by a computing device, a list indicating a plurality of encrypted communication flows, wherein the list indicates, for each of the plurality of encrypted communication flows: identification data associated with a respective encrypted communication flow, and one or more corresponding actions to perform on the respective encrypted communication flow, wherein at least one of the one or more corresponding actions comprises decrypting packets of the respective encrypted communication flow; receiving, by the computing device, one or more first packets initiating a first encrypted communication flow; identifying, by the computing device, first flow identification data associated with the one or more first packets; comparing (1-4, 1-5b), by the computing device, the identified first flow identification data with the identification data of the list; identifying, based on the comparing, a matching encrypted communication flow, of the plurality of encrypted communication flows indicated in the list, that corresponds to the first encrypted communication flow; receiving one or more second packets that are part of the first encrypted communication flow initiated by the one or more first packets; based on determining that the one or more second packets are part of the first encrypted communication flow initiated by the one or more first packets, and based on determining that the first encrypted communication flow is indicated in the list, decrypting the one or more second packets based on a first corresponding action associated with the matching encrypted communication flow; and performing, by the computing device, at least a second corresponding action associated with the matching communication flow, on the decrypted one or more second packets. generating (1-1, 1-2), by a computing device, a list indicating a plurality of encrypted communication flows, wherein the list indicates, for each of the plurality of encrypted communication flows: identification data associated with a respective encrypted communication flow, and one or more corresponding actions to perform on the respective encrypted communication flow, wherein at least one of the one or more corresponding actions comprises decrypting packets of the respective encrypted communication flow; identification data associated with a respective encrypted communication flow, and one or more corresponding actions to perform on the respective encrypted communication flow, wherein at least one of the one or more corresponding actions comprises decrypting packets of the respective encrypted communication flow; receiving, by the computing device, one or more first packets initiating a first encrypted communication flow; identifying, by the computing device, first flow identification data associated with the one or more first packets; comparing (1-4, 1-5b), by the computing device, the identified first flow identification data with the identification data of the list; identifying, based on the comparing, a matching encrypted communication flow, of the plurality of encrypted communication flows indicated in the list, that corresponds to the first encrypted communication flow; receiving one or more second packets that are part of the first encrypted communication flow initiated by the one or more first packets; based on determining that the one or more second packets are part of the first encrypted communication flow initiated by the one or more first packets, and based on determining that the first encrypted communication flow is indicated in the list, decrypting the one or more second packets based on a first corresponding action associated with the matching encrypted communication flow; and performing, by the computing device, at least a second corresponding action associated with the matching communication flow, on the decrypted one or more second packets.