← Security+ glossary

On-path / MITM attack and evil twin MITM

An on-path (MITM) attack is when an attacker inserts themselves unnoticed between two communicating parties in order to intercept or alter the traffic, and HTTPS defends against this because it encrypts the traffic and uses a certificate to verify the server's authenticity. An evil twin is a fake Wi-Fi access point that impersonates a legitimate network to trick victims into connecting so their traffic can be intercepted.

All Security+ guides →