I keep hearing on VPN ads that you have to use a VPN to not have your login information stolen. So far I have been using Cloudflare WARP to be safe enough. However, if I am using an HTTPS website, do I really need a VPN or WARP? Will an attacker on the same network as me be able to access passwords transmitted over HTTPS?

  • VPNs hide it from your local WiFi, but tells the VPN company. Something more people should be asking themselves: do you trust your WiFi more or less than your VPN provider?

    For Cloudflare, I’d say yes, but for the VPN companies the Youtube ads keep shoving down everyone’s throats, I think you’re better off just leaving the VPN disconnected in many cases.

    • jsdz@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      1 year ago

      It’s not particularly easy to find a trustworthy VPN, but it’s not particularly hard to find one you’d trust more than whatever random public wi-fi you’ve found while on the road. Your stock reminder that we can never trust anyone is not really useful here.

      Using a good VPN is one way to sanitize the whole network environment when you have no reason to trust even the router you’re connecting to, avoiding quite a few risks besides that of someone passively analyzing your traffic.

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        For what reason? If your doing something scketchy the VPN company is going to know about it.

        If you want your DNS encrypted use encrypted DNS. If you want to be really hidden use Tor