5 ms·
What if you use a VPN?
by blake8086 14y ago
What if you use a VPN?
- napoleond 14y agoI'm not a security guy, but I don't see what would stop a determined adversary with control of the LAN from performing a MITM attack. Obviously, a VPN is still more secure than no VPN.
- Jach 14y agoDon't VPNs use public-key authentication like one can do with SSH? If they do, it's immune to MITM attacks.
- napoleond 14y agoSo sub "using airport WiFi" with "using airport without a public-key encrypted VPN" or "using airport WiFi with a public key encrypted VPN, but from a new device were the key isn't listed yet". The point is, people make mistakes.
- kansface 14y agoThe entire Internet is a MiTM. SSL protects against such an adversary (unless you click your browser's ignore button when given the popup).
- napoleond 14y agoRight, but the source subnet is presumably a more useful position from which to perform a MITM when the goal is connecting a physical person/device to their "anonymous" online behaviour.
- michael_miller 14y agoSSL protects against such an adversary only if the creator of the certificate is not compromised. While I think this is a reasonably safe assumption, there are still vectors for an attack. For example, if a government agency wanted to conduct an MITM attack, they could compel the CA to create a valid certificate.