Advice to avoid public Wi-Fi is mostly out of date

Re:Advice to avoid public Wi-Fi is mostly out of date by billyhoffman on Thursday January 30, 2020 @10:19AM (#22191879)

Honest question... why not?

Modern banks use HTTPS throughout. The banks I use all have HSTS and use preloading so no hijacking to a non-HTTPS site. I use a password manager so if somehow I do get hijacked and get sent to a phishing site, and even if that phishing site is using a Lets Encrypt cert to prevent the “Not Secure” banner in a modern browser, my password manager isn’t going to recognize the domain so it would not let me attempt to log in even if I wanted to.

[ Parent | on HN ]

Re:Advice to avoid public Wi-Fi is mostly out of date by ceejayoz on Thursday January 30, 2020 @11:04AM (#22192357)

This comments thread literally starts with someone who discovered their bank's app wasn't validating the certificate, though.

[ Parent | on HN ]

Re:Advice to avoid public Wi-Fi is mostly out of date by lukewink on Thursday January 30, 2020 @11:23AM (#22192542)

In that case it wouldn't be safe to use the app on a private network either.

[ Parent | on HN ]

Re:Advice to avoid public Wi-Fi is mostly out of date by JohnFen on Thursday January 30, 2020 @12:35PM (#22193326)

True, but doing so on a private network would still be a whole lot safer than on an open AP.

[ Parent | on HN ]