Quote:
Originally Posted by HarryT
Please correct me if I'm wrong, but if you access a site using a secure protocol (ie an "https" URL), isn't all the traffic that flows between your browser and the server encrypted?
|
In theory. In practise you're vulnerable to man-in-the-middle* attacks, especially relevant when accessing over someone else's wifi.
Using a VPN should avoid this problem, but security is hard.
*That is, a computer in between you and the server pretends to be the server (to you) and pretends to be you (to the server), decrypting and re-encrypting all traffic, and so seeing everything that passes.