Week 6 Challenge - Can You Explain the TLS Handshake?

The $4.2 Million MITM Attack Nobody Saw Coming It was a regular Tuesday morning when the CFO of a mid-sized financial services firm clicked "Wire Transfer: $4,200,000" from what appeared to be their bank's legitimate portal. The SSL padlock icon was there. The domain looked right. Everything seemed normal. Except it wasn't their bank. An attacker had positioned themselves between the CFO and the actual bank, intercepting every packet. No encryption. No certificate validation. Pure HTTP traffic dressed up to look secure. By the time the fraud was discovered three hours later, the money had bounced through six countries and vanished. The post-mortem revealed the terrifying truth: the internal accounting system had never been configured to use HTTPS . Every login, every transaction, every authorization—transmitted in plaintext across the corporate network for five years. One compromised switch. One packet sniffer. Game over. Why TLS is Everywhere (And Why You Need to Understand It) This i