I read this article today about an SSL MITM.
I am trying to understand this attack. This may be a naive question.
My understanding is that the WebView sends a request to domain name, the server sends down a X.509 certificate, which is invalid SSL certificate in this case, as the attacker might have already redirected the request to his own server. The WebView failed to identify this and accepted the SSL connection using the public key sent down and is now accepting code from attacker's server.
I want to know if the above explanation is correct given the details in the article.