you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 6 months ago (2 children)

No, I'm definitely talking about https. Could be this is no longer a thing tho, I need to look it up.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 6 months ago (1 child)

    afaik there is some metadata leak with https unless you use ECH which most websites do not support

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 6 months ago

    I think I was thinking of situations where the wifi owner redirects you to their impersonation site with their own cert, but a normal browser will pop up a big warning about that. Also if the site properly uses HSTS and you've been there on that machine before, then you're protected from being directed to a http impersonation site. A VPN will protect you from both (assuming the VPN us trustworthy), but if you're savvy you don't need it. But then the type of person who needs the kind of simplified explanation for "why VPN" that you get in ads is not savvy.

  • source
  • parent