I'm updating an iOS app and I want to prove that it is vulnerable to MiTM attack.
I have set up Charles Proxy on my mac and configured the Simulator so that it trusts Charles CA Certificate, per these instructions: http://www.charlesproxy.com/documentation/faqs/ssl-connections-from-within-iphone-applications/
I am able to run the app and now I see the HTTPS traffic in Charles, in clear text. OK, Good.
Is this enough to show MiTM vulnerability?
I was thinking that to really prove it, I would need to set up a sniffer, etc. on a server on the network. But maybe this is too much work. Charles is a proxy, so is showing unencrypted traffic in Charles good enough?