3 ms·

I don't understand, anyone who can MITM can also sniff, right?

• kop316 6y ago
  Yes they can. They simply decrypt, and reencrypt with their own self signed cert. If you have no way to verify the self-signed cert, you would never know.
• naniwaduni 6y ago
  An adversary with MitM capability needs to commit to being detectable in order to read encrypted traffic.
• dtech 6y ago
  but not everyone who can sniff can MITM, encryption always prevents sniffing