3 ms·
I suppose this is slightly off-topic, but what security does a VPN actually offer when connecting to a https site? Surely browsers should show a NOT SECURE warn
by daxterspeed 7y ago
I suppose this is slightly off-topic, but what security does a VPN actually offer when connecting to a https site? Surely browsers should show a NOT SECURE warning if connecting to a https site while on an unsecured wifi was actually insecure?
- 0-_-0 7y agoIsn't the problem there a MITM attack? In my experience Firefox does detect MITM attacks though.
- Xylakant 7y agoCurrently, the WIFI can still observe what sites you’re visiting (SNI still happens in plaintext) and, depending on the circumstances attempt a downgrade attack. Many people first try http and the destination then redirects, a lot of sites still don’t prevent that. For some folks you might even leverage something like the Sony rootkit. Once the connection is established, you’re fairly good, but until then quite a few things can go off the rails.
- iamnothere 7y agoIt prevents your ISP, roommate, spouse, or employer from learning what domains you are visiting. It should also protect against the creative HTTPS downgrade attacks that sometimes show up.