3 ms·
AWS claims that VPC traffic is immune from MiTM attacks. [0] (Although they strangely don't talk about this much, and I can't even find official documentation
by luhn 7y ago
AWS claims that VPC traffic is immune from MiTM attacks. [0] (Although they strangely don't talk about this much, and I can't even find official documentation of it.) So within a VPC, you can forgo certificate validation.
However, in general certificate validation would protect you. The attacker wouldn't have a valid certificate, so your application would refuse to connect to the malicious endpoint.
[0] https://kevin.burke.dev/kevin/aws-alb-validation-tls-reply/ https://kevin.burke.dev/kevin/aws-alb-validation-tls-reply/
- arkadiyt 7y agoThey do talk about it in their Advanced Networking Study Guide: https://twitter.com/0xdabbad00/status/995833462660612096 https://twitter.com/0xdabbad00/status/995833462660612096
- stingraycharles 7y agoSo basically they intercept all ARP communication and add VPC header information to all Ethernet packets, which should rule out any MITM scenario. Of course the keyword here is “should”, and depending on your threat mode you may or may not want to have an additional defense layer of SSL certificate validation.