Man-in-the-middle attack
Türkçe: Ortadaki adam saldırısı
An attack in which the attacker secretly inserts themselves into communication between two parties to listen to or alter it.
// EXPLANATION
It is easy on unencrypted networks (for example public Wi-Fi). HTTPS and certificate verification prevent it, but if the user ignores a certificate warning the protection is bypassed.
// ALSO KNOWN AS
man-in-the-middleMITM
// RELATED TERMS
HTTPSHTTP wrapped in TLS encryption; it prevents data between browser and site from being eavesdropped on or altered.
Digital certificateAn electronic document that binds a public key to an identity (for example a domain name) and is signed by a trusted authority.
PhishingAn attack that tricks users into handing over passwords or payment details through fake emails, messages or websites.
