We’re rewarding the question askers & reputations are being recalculated! Read more.
2 deleted 42 characters in body; edited tags
source | link

How big is the man in the middle attack riskthreat from outside the network when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things.

I am not concerned about a third party reading the transmission, only altering it. Imagine data that is nowhere confidential, just has to be accurate.

If an application is running on a user computer, on the intranet and is communicating with an endpoint that is somewhere on theanother intranet (can't be accessed from the outside)endpoint.

For And for the sake of the question, you can assume that anyoneeveryone on the inside is trustable.

  Is a man-in-the-middle attack a real risk? Could someone on the outside somehow see the request and fake a response?

I am interested in the intranet part of it. Intuitively, I would guess that it is not possible, let alone risky, but I could be wrong.

So first of all, is it possible? Second of all, is it reasonably risky?

An explanation of how it could be done, if it can, would be appreciated.

How big is the man in the middle attack risk when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things.

I am not concerned about a third party reading the transmission, only altering it. Imagine data that is nowhere confidential, just has to be accurate.

If an application is running on a user computer, and is communicating with an endpoint that is somewhere on the intranet (can't be accessed from the outside).

For the sake of the question, you can assume that anyone on the inside is trustable.

  Is a man-in-the-middle attack a real risk? Could someone on the outside somehow see the request and fake a response?

I am interested in the intranet part of it. Intuitively, I would guess that it is not possible, let alone risky, but I could be wrong.

So first of all, is it possible? Second of all, is it reasonably risky?

An explanation of how it could be done, if it can, would be appreciated.

How big is the man in the middle threat from outside the network when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things.

I am not concerned about a third party reading the transmission, only altering it. Imagine data that is nowhere confidential, just has to be accurate.

If an application is running on a user computer on the intranet and is communicating with another intranet endpoint. And for the sake of the question, you can assume that everyone on the inside is trustable. Is a man-in-the-middle attack a real risk? Could someone on the outside somehow see the request and fake a response?

I am interested in the intranet part of it. Intuitively, I would guess that it is not possible, let alone risky, but I could be wrong.

So first of all, is it possible? Second of all, is it reasonably risky?

An explanation of how it could be done, if it can, would be appreciated.

1
source | link

How big is the man in the middle attack risk when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things.

I am not concerned about a third party reading the transmission, only altering it. Imagine data that is nowhere confidential, just has to be accurate.

If an application is running on a user computer, and is communicating with an endpoint that is somewhere on the intranet (can't be accessed from the outside).

For the sake of the question, you can assume that anyone on the inside is trustable.

Is a man-in-the-middle attack a real risk? Could someone on the outside somehow see the request and fake a response?

I am interested in the intranet part of it. Intuitively, I would guess that it is not possible, let alone risky, but I could be wrong.

So first of all, is it possible? Second of all, is it reasonably risky?

An explanation of how it could be done, if it can, would be appreciated.