title: Is it possible for a mobile app request to be sniffed even if https?
body: <p>We are developing a hybrid mobile application and for certain function calls, there is a url called. Here is a sample request for getting user information</p>
  
  <p><a href="http://someurl.com/1234/account" rel="nofollow noreferrer">http://someurl.com/1234/account</a>   </p>
  
  <p>where: 1234 - is the user id in the database.</p>
  
  <p>We figured that a "man in the middle attack" is possible for this. The url called by the mobile app can be sniffed, then the hacker just changed the value for the user id and with that he can see information for other users. The question is - would simply changing the url called to https solve this security flaw?</p>