An encrypted-but-unauthenticated connection is not readable just by some unknown entity, but by an arbitrary, unbounded number of unknown entit<i>ies</i>, which is practically the same as &quot;anyone.&quot;<p>Anyone who&#x27;s in a position to passively eavesdrop an unencrypted connection is usually able to actively eavesdrop an encrypted-but-unauthenticated connection with just a bit more work.