Here’s to more HTTPS on the web
I wonder how effective HTTPS is against MITM attacks. When I type www.somedomain.com into my browser, it goes to <a href="http:&#x2F;&#x2F;www.somedomain.com" rel="nofollow">http:&#x2F;&#x2F;www.somedomain.com</a>. If the page then redirects to <a href="https:&#x2F;&#x2F;www.somedomain.com" rel="nofollow">https:&#x2F;&#x2F;www.somedomain.com</a> it is too late already.<p>A MITM attacker could intercept my initial request and then proxy everything afterwards. So he would get all the data in clear text.<p>Somebody could probably put an app onto a phone that offers a wifi hotspot and then MITMs everything. By walking around with that phone he would probably capture all kinds of &quot;private&quot; communication all the time. And none of us would know.<p>When I am in an airport and see a hotspot &quot;Free Airport Wifi&quot; I always suspect it is such an app in reality. I mean, everybody can call their hotspot &quot;Free Airport Wifi&quot;.