Security when you’re on untrusted network. I can trust Google to snoop my banking data and update the spending power info on my ad profile, I can’t trust the random dude in trench coat also using the public wifi when I am traveling out of my roaming coverage.
I joke of course, but the security aspect is still valid.
It’s not the guy in the trenchcoat next to you you need to worry about.
It’s the fact that some unknown entity owns/has set up the WiFi.
Anyone working with complex network setup and admin will tell you how much you can abuse owning the network a user is connected to.
The network guys at work never use public WiFi, not hotels or anything. Neither do I, even with my much more limited knowledge of network administration.
What is it that you’re doing that is still not using some form of authenticated encryption? Almost everything is https, ssh, almost all mailservers have tls support, irc does have tls support…
What’s left that needs to be encrypted by a VPN?
Security when you’re on untrusted network. I can trust Google to snoop my banking data and update the spending power info on my ad profile, I can’t trust the random dude in trench coat also using the public wifi when I am traveling out of my roaming coverage.
I joke of course, but the security aspect is still valid.
It’s not the guy in the trenchcoat next to you you need to worry about.
It’s the fact that some unknown entity owns/has set up the WiFi.
Anyone working with complex network setup and admin will tell you how much you can abuse owning the network a user is connected to.
The network guys at work never use public WiFi, not hotels or anything. Neither do I, even with my much more limited knowledge of network administration.
What is it that you’re doing that is still not using some form of authenticated encryption? Almost everything is https, ssh, almost all mailservers have tls support, irc does have tls support… What’s left that needs to be encrypted by a VPN?