SSL stripping is a type of cyber attack where the attacker intercepts communication between a victim’s device and a website/application, and downgrades the secure HTTPS connection to an unencrypted HTTP connection. This allows the attacker to intercept and steal sensitive information exchanged between the victim and the website, including login credentials, credit card numbers, and other personal data. SSL stripping is a form of man-in-the-middle attack, where the attacker sits between the victim’s device and the website, intercepting and modifying the traffic in real-time, without the victim’s knowledge.
