Dictionary · Hacking Techniques and Methodologies
Man-in-the-Middle
MITM — Man-in-the-Middle
Network attacks · Intermediate
A position in which someone between two parties can read or change traffic that is not protected. Transport encryption and strict certificate checks close that position.
If traffic is readable on the path, the path is part of the trust decision. Encryption, certificate warnings you do not click through, and trusted networks for administration are the practical controls.
Example: A browser warns that a certificate does not match the site. Stopping there prevents an on-path attacker from presenting a fake encrypted session.
Common misconception
- Encryption does not help if the user approves a warning they do not understand. The certificate check is part of the defense.