I have heard that httpHTTP use plain text communication. If it is so how can a hacker or someone tap it. From my little knowledge I know that if we sent a request to a web server it replies back to us using our ipIP address. So if an attacker wants to know what I am doing , how does he do it? Is it necessary to know my ipIP address or does he intercept it in between? Or is it like this: an attacker decides to attack someone and he picks some data and he finds that this belong to say X , which means does he attack randomly?