3 ms·

MITM

• ipaddr 5y ago
  I think we are going to need a little bit more. How does the attacker get traffic to route to them?
  • lmm 5y ago
    DNS is not (yet) generally secured. An attacker who e.g. controls a wifi AP can just substituted their own DNS responses and redirect users to their own addresses, and their servers have valid certificates for the domains that they're supposed to be, so from the user side everything looks fine.