Even if HTTPS is deployed, and even if the client actually verifies the certificate, untrusted networks are still risky. There are many attacks against HTTPSs

Even if HTTPS is deployed, and even if the client actually verifies the certificate, untrusted networks are still risky. There are many attacks against HTTPSs itself (e.g. DROWN [0]), bugs (like the Windows 10 crypto bug [1] from just a couple of weeks ago), irresponsible CAs (e.g. symantec [2]), and hacked CAs (e.g. DigiNotar [3]). Are things better than they were before Let's Encrypt? Sure. But is the advice against public Wi-Fi out of date? I don't think so. [0]: https://en.wikipedia.org/wiki/DROWN_attack https://en.wikipedia.org/wiki/DROWN_attack [1]: https://techcrunch.com/2020/01/14/microsoft-critical-certificates-bug/ https://techcrunch.com/2020/01/14/microsoft-critical-certifi... [2]: https://wiki.mozilla.org/CA:Symantec_Issues https://wiki.mozilla.org/CA:Symantec_Issues [3]: https://en.wikipedia.org/wiki/DigiNotar https://en.wikipedia.org/wiki/DigiNotar