It is almost impossible for an individual to prevent MITM attack. It should be the responsibility of the website owner to prevent it.
As for the technical article, you did not describe really important steps for website operators:
with secure mechanisms
which ones? π
multi-factor authentication
It won't help against MITM attack π€·ββοΈ It secures accounts, so it is not possible to hack them so easy, but if there is the man in the middle, then he'll get all your authorization steps
you never ask about login data or any other data through emails
Phishing is not MITM
always ensure that your website is free of security threats by regular auditing and testing it
too broad meaning... what do you mean by auditing and testing? Which tools should be used?
I would expect more technical hints in your article π Check out this article to learn how website owners can prevent MITM attacks.
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
It is almost impossible for an individual to prevent MITM attack. It should be the responsibility of the website owner to prevent it.
As for the technical article, you did not describe really important steps for website operators:
which ones? π
It won't help against MITM attack π€·ββοΈ It secures accounts, so it is not possible to hack them so easy, but if there is the man in the middle, then he'll get all your authorization steps
Phishing is not MITM
too broad meaning... what do you mean by auditing and testing? Which tools should be used?
I would expect more technical hints in your article π Check out this article to learn how website owners can prevent MITM attacks.