2 added 5 characters in body
source | link

Given a conversation is occurring using HTTPS, during the handshake, can the man in the middle interpret all communication from the server to the client?

Assuming that the man in the middle can receive the parcelpacket, and open it (using the public key), could it then pass the unmodified (encrypted) parcelpacket which it received from the server? It would receive back a parcelpacket encrypted using the public key (which it would not be able to interpret), but would this allow the man in the middle to heareavesdrop half the conversation?

Given a conversation is occurring using HTTPS, during the handshake, can the man in the middle interpret all communication from the server to the client?

Assuming that the man in the middle can receive the parcel, and open it (using the public key), could it then pass the unmodified (encrypted) parcel which it received from the server? It would receive back a parcel encrypted using the public key (which it would not be able to interpret), but would this allow the man in the middle to hear half the conversation?

Given a conversation is occurring using HTTPS, during the handshake, can the man in the middle interpret all communication from the server to the client?

Assuming that the man in the middle can receive the packet, and open it (using the public key), could it then pass the unmodified (encrypted) packet which it received from the server? It would receive back a packet encrypted using the public key (which it would not be able to interpret), but would this allow the man in the middle to eavesdrop half the conversation?

    Tweeted twitter.com/StackSecurity/status/793696797483032576
1
source | link

Can a man in the middle hear half the HTTPS conversation

Given a conversation is occurring using HTTPS, during the handshake, can the man in the middle interpret all communication from the server to the client?

Assuming that the man in the middle can receive the parcel, and open it (using the public key), could it then pass the unmodified (encrypted) parcel which it received from the server? It would receive back a parcel encrypted using the public key (which it would not be able to interpret), but would this allow the man in the middle to hear half the conversation?