It will likely be encrypted. If they are lucky, then the vendor won't validate certs and you could MITM with a proxy. Super simple with Charles or Squid, but

It will likely be encrypted. If they are lucky, then the vendor won't validate certs and you could MITM with a proxy. Super simple with Charles or Squid, but this assumes the device doesn't validate certs. Some IoT don't.