thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

SSL Stripping

An on-path attack that downgrades a user's HTTPS connection to HTTP so traffic can be read in clear text.

Definition

The attacker intercepts the initial HTTP request and proxies the site over HTTPS to the server while serving HTTP to the victim. HTTP Strict Transport Security (HSTS) and HSTS preload lists prevent browsers from connecting over HTTP.

Example

sslstrip on a hotel network converting https links to http in pages served to guests.

Exam tip

HSTS is the definitive answer for SSL stripping.

Related terms