you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 3 months ago* (last edited 3 months ago)

NTP, DHCP, SNMP, FTP, SSH

  • NTP just tells you time. No confidential data here.
  • DHCP and SNMP dont go over the internet. A VPN won't save you from this.
  • FTP is dead. Not even web browsers support it anymore.
  • SSH is already encrypted. In some cases, it can literally be used as a VPN.

Wireshark is useless on WPA3. Although hotel wifi typically doesn't use it.

SNI is encrypted with ECH.

I disabled plaintext SMTP on my mail server years ago. Requiring TLS actually reduced spam by 99%. No reputable mail server will use plaintext.

Almost nothing uses plain HTTP. The only thing I typically see is my phone's internet connectivity check, which simply returns an HTTP 204 (No content). It's practically a ping.

HTTPS + DoH is enough because all of these problems are solved.

  • source
  • parent