3 ms·
in 2023 : none sites are protected not only wity TLS but also HSTS and the list goes on. Wi-Fi doesn't include sturdy security mecanisms anyway, so wifi is ne
by hinata08 4y ago
in 2023 : none
sites are protected
not only wity TLS but also HSTS and the list goes on.
Wi-Fi doesn't include sturdy security mecanisms anyway, so wifi is never safe.
Companies that are serious about network security are recommended to use a second factor, like a VPN, especially on their company network (because they always have ressources that lack protection)
For customers and individuals like us, sites are safe enough not to do that (unless you host your own services)
So the only thing PPL can do on public networks is maybe fingerprinting, and tracking the whereabouts of your devices accross the place (Especially in airports like Istanbul where you need to swipe your passport in a machine to get a wifi code)
But that doesn't prevent me from going to Discord and HN and do banking over public networks.
- jve 4y ago> sites are protected not only wity TLS but also HSTS and the list goes on. HSTS is just what says for the browser not even try HTTP connection, but directly HTTPS.
- maerF0x0 4y agoand also to report an error if there's a redirect back to HTTP, right? ie when a MITM is attempting to drop you back to insecure.
- hinata08 4y agoyes. if HSTS is implemented properly, it won't just report an error, but it will also forbid any connection. For example, on Firefox, you can't bypass an HSTS error. The browser won't let you add an exception to connect to the site. (you have to purge your data to connect again 'for the first time' on the site)