I kinda don’t trust my home network because my brother is douche and I feel like he’s gonna do some weird things with the connection, so I prefer to juse use my phone’s data (unlimited data plan) to avoid any shenanigans. Hypothetically, how much harm can an evil wifi do?

Does using HTTPS avoid all risks? What about evey program on your computer or every app on your phone, do they also have HTTPS everywhere on? (I use Android btw)

How much could a VPN do better that HTTPS cant?

  • Peffse@lemmy.world
    7·
    2 months ago

    Correct me if I’m wrong but- manually configuring your DNS in the OS would still enable traffic monitoring, wouldn’t it? I always thought DNS traffic is not encrypted by default.

    • hemko@lemmy.dbzer0.comEnglish
      3·
      2 months ago

      Oh, yeah you’re absolutely correct. I was fixated too much on the DNS logging lol

      DoH (DNS over HTTPS) or DoT (DNS over TLS) would fix that

      • ShortN0te@lemmy.ml
        4·
        2 months ago

        Actually no. The SNI is still not encrypted. So every site you are visiting can still be sniffed.

        • Akui@lemmy.ml
          3·
          2 months ago

          This is resolved in TLS 1.3 with ECH. Adoption is still not wide though, so your concern is valid.

          • ShortN0te@lemmy.ml
            2·
            2 months ago

            Was not aware ECH was actually in TLS 1.3 thanks for that. But yes it will take a long time for widespread adoption.

    • pHr34kY@lemmy.world
      2·
      2 months ago

      I’ve configured my home wifi to capture all DNS regardless of its intended recipient. It’s unencrypted so it’s possible.

      I also use encrypted DNS on my phone.