[55555]

Practically speaking how does one MITM an SMTP connection? For example, from Google to Microsoft. They connect directly to the IP addresses they get from MX records + lookup. What's the actual threat vector/execution here?

[londons_explore]

Anyone with hardware on the network path can do it... Or anyone who can inject BGP routes can do it too.