So basically they intercept all ARP communication and add VPC header information to all Ethernet packets, which should rule out any MITM scenario. Of course th

So basically they intercept all ARP communication and add VPC header information to all Ethernet packets, which should rule out any MITM scenario. Of course the keyword here is “should”, and depending on your threat mode you may or may not want to have an additional defense layer of SSL certificate validation.