Mitmepunkt

Mitmepunkt is a Norwegian term referring to the point in a network where communications between two parties can be intercepted, altered, or impersonated by a third party in a man-in-the-middle scenario. The concept covers any node or situation that places an attacker between the initiator and the recipient, often without the participants’ knowledge.

MITM attacks can be passive, simply eavesdropping on data, or active, modifying messages or injecting malicious content. Common techniques include ARP spoofing on local networks, DNS spoofing or hijacking to redirect traffic, rogue Wi‑Fi access points, compromised routers, and malware that configures devices to proxy traffic. In environments using TLS, a MITM may decrypt and re-encrypt traffic if the attacker can present trusted certificates, or use SSL/TLS interception via a controlled proxy or security appliance, with varying levels of client trust.

Defenses emphasize maintaining end-to-end trust and minimizing exposure. Use strong encryption with proper certificate validation, enable certificate pinning where feasible, and implement HTTP Strict Transport Security (HSTS). In untrusted networks, employ trusted VPNs or other encrypted tunnels. Network monitoring, intrusion detection systems, and secure DNS practices (such as DNSSEC) aid in detecting or preventing MITM conditions. Regular device hardening and user education about insecure networks and rogue hotspots are also important.

Note that MITM techniques can be used legitimately by security providers for traffic inspection in controlled environments, but such use requires explicit authorization and transparency. See also: man-in-the-middle attack, ARP spoofing, SSL/TLS interception.