I keep hearing on VPN ads that you have to use a VPN to not have your login information stolen. So far I have been using Cloudflare WARP to be safe enough. However, if I am using an HTTPS website, do I really need a VPN or WARP? Will an attacker on the same network as me be able to access passwords transmitted over HTTPS?
your https connection is sufficient to protect the connection.
only unencrypted traffic is at risk to public wifi attacks.
Biggest risk is email imo where it is far too easy to have unencrypted settings
What do you mean? Your email server isn’t connected to public WiFi. As long as your using https to access the the web interface your fine.
Even if your using an email client like Thunderbird you emails are most likely encrypted as that’s the default
Pop/imap is not https
For for a web interface.
Anyway both of those are encrypted by default
They should be… but are they … it is entirely too easy to setup unencrypted email just to get it working. Crazy…
Can you name one email provider who doesn’t do that by default?
It is the client and yes, most of them.
How so?