If your browser is properly configured, it’ll recognize a MITM attack, so you’ll know if your traffic is properly encrypted because it checks root certs against a known good set. The only concern is domain name leakage (both from DNS and SNI), but that’s a privacy thing, not a security thing. DoH fixes the DNS issue, so consider that for a low hanging fruit privacy win.
If you’re accessing things outside a browser… don’t do that on public WiFi unless you can confirm it verifies certificates.
Eh, I see it as a necessity in the modern age, it’s politically agnostic for me. I run a full time VPN as a matter of privacy and security.
VPN doesn’t really do anything for security, and it only really gives you privacy from your ISP. They’re very much over-marketed by VPN companies.
It absolutely does provide security on a public WiFi network.
Not really.
If your browser is properly configured, it’ll recognize a MITM attack, so you’ll know if your traffic is properly encrypted because it checks root certs against a known good set. The only concern is domain name leakage (both from DNS and SNI), but that’s a privacy thing, not a security thing. DoH fixes the DNS issue, so consider that for a low hanging fruit privacy win.
If you’re accessing things outside a browser… don’t do that on public WiFi unless you can confirm it verifies certificates.