I work for a large company and we are trying to judge the safety of some proprietary information that is being sent and received in a new application we are developing.
After our initial testing we realized that we could easily do a MitM attack with Fiddler over WiFi in no time in all - leaving a bunch of information in the open. Since then we changed it so that our company's proprietary information can't be sent over WiFi but instead over network only.
So the question is, is it possible for someone to decrypt our HTTPS packets over the mobile network (QXDM Possibly)?
Understandably if they get our private keys they could do it with wireshark but we are going to assume that it wont be the case.
If you know of any methodologies - we would like to test them against our app.
Edit: Adding More Info
It's an Android application that is sending important company information to and from our servers. We are not worried about people losing personal information (someone else listening in for example), we just dont want our company information decrypted (a situation where an end user decrypts our application's https packets). We were able to decrypt it easily using wifi and fiddler (since changed), we need to know what a user can do to decrypt packets that are sent simply over the network between our app and our server.