Re: [Skunkworks] What are the odds? https -> http requests

A MITM attack would be a consequence of such a setup - this could be a reason why Mobile service providers are not to keen to freely give out APIs to their mobile payment solutions particularly for web applications. It could also explain how law enforcement authorities are able to access and use information from social websites(e.g facebook) about criminals or suspects. Just a theory.... installing a reverse proxy solution and converting all https requests to http would prove this, but this would only work on host web servers with access to both ports 80 and 443.