Key-Exchange Logic for Encrypting Interface Data in Front-End/Back-End Separated Projects (Addendum: MITM Man-in-the-Middle Attack)
Earlier I wrote "Key-Exchange Logic for Encrypting Interface Data in Front-End/Back-End Separated Projects (RSA, AES)", explaining the encryption/decryption strategy when front and back ends exchange data. As my understanding and grasp of network programming grew, two months later I had to write another addendum to patch my previous article, because improper use still can't achieve absolute security. The previous article didn't mention the man-in-the-middle attack, so I'm adding it here.








