fact that the MITM used a self signed certificate makes the attack easily detectable even for the nontechnical user, since the web browser will typically display a warning about the site not being trusted.