Comment by hiraki9

Does this only occur when the user logs into iCloud using the web, or does it happen on the device as well?

Does anyone know if iOS uses certificate pinning when connecting to iCloud services, and if so if that is sufficient to prevent against this type of attack?