This leaves communication unencrypted, exposing data to potential interception and man-in-the-middle (MITM) attacks. Enforcing HTTPS ensures that data transmitted between clients and the server is encrypted, protecting sensitive information and maintaining compliance with security best practices.
An attacker intercepts HTTP requests sent to the ALB on port 80 using a MITM attack. They are able to view sensitive data, such as login credentials or session tokens, being transmitted in plaintext. Without HTTPS redirection, users remain vulnerable to these types of attacks. By redirecting HTTP to HTTPS, all communication is encrypted, preventing attackers from exploiting intercepted data.
