I don’t use a VPN, even on public WiFi, because I don’t use any unsecured protocols (except for occasional public HTTP). Am I being naïve?
17
1
2
Yes; so someone spoofs my mail server’s or banks DNS entry, and my mail client and browser catch it due to the TLS cerfificate chain.

Oct 16, 2017 · 12:57 PM UTC