I feel like wifi attacks like this don’t acknowledge caveated well enough. DNS poisoning should be mitigated by cryptographic trusts, HTTP ‘downgrade’ attacks b

I feel like wifi attacks like this don’t acknowledge caveated well enough. DNS poisoning should be mitigated by cryptographic trusts, HTTP ‘downgrade’ attacks by HSTs. As soon as you start caring about transport security, you have to care not only about your local network being encrypted (I’ve never seen encrypted Ethernet), but also your upstream providers routes, and the operational security of those. These are all well understood by some of the security community. While these memelords continue to name their little vulnerabilities to make headlines, actual security, and newsworthy vulnerabilities slip under the headlines entirely.