4 ms·
He made this point explicit: > Networks like these make it easy for attackers to get a copy of your network data, and if you send something unencrypted, the re
by lifthrasiir 8y ago
He made this point explicit:
> Networks like these make it easy for attackers to get a copy of your network data, and if you send something unencrypted, the results can be quite harmful.
The web should be ideally end-to-end encrypted with HTTPS. But in case this assumption breaks down, VPN gives an additional headroom for security. Not much (as explained in the article, and thus should not be advertised so), but still useful.
- thinkloop 8y agoThe VPN only protects the first hop, it would not be a good backup for https.
- lifthrasiir 8y agoYes, but if the target site does not use https there is no alternative.
- quickthrower2 8y agoIt protects the first hop for request data. But response data could be interfered with too.
- iuguy 8y ago> The web should be ideally end-to-end encrypted with HTTPS. No. People designing public access networks should use encryption and AP client isolation.
- dahfizz 8y agoThe internet is so much bigger than just websites. HTTPS is great but VPNs provide encryption at a much lower level, where it should be. Even when using https you are exposing a lot of unencrypted data because https is an application layer encryption. It's not enough.