[moondev]

Yikes.. So compromise a public wifi and MITM + store any traffic pointed at the affected domain(s), then simply sign up for their own ERP account, download the key and decrypt.

[kbirkeland]

Most public wifi hotspots I've seen are unencrypted, so there'd be no need to do a MitM - just be within range to decode the client and AP transmissions.

[moondev]

Even on an unsecured network would the transmissions not be encrypted via tls from your computer to the server?

[willstrafach]

Only if PFS is not in use though.