I have two applications running on the same computer. These applications need to communicate with each other. One application acts like a server and the other like a client.
Client <-> Server communication is handled with a HTTPS connection. The server uses a self signed certificate for this. The self signed certificate is generated at startup and is only kept in RAM.
These applications run on Linux, Windows and MacOS.
I am researching possible ways a non-root user could listen in on the communication between these two applications. However since I am not an expert in this field I am having trouble finding information.
What kind of risks/attacks can I expect? I am thinking man-in-the-middle attacks, packet sniffing, ssl stripping etc.