Reply to thread

Message

<blockquote data-quote="Eddie Morra" data-source="post: 770450">Could you elaborate a bit more on what you mean?I think you&#039;re referring to the logins where you connect to a free hotspot and then need to sign into your subscription account to remove the restriction of the free WiFi to only the login page. If that is what you&#039;re thinking of, then my answer is going to be an assuming yes, because it would be unacceptable and ridiculous if this wasn&#039;t the case.I am pretty sure that most good ISPs that have a system like this will be leveraging HTTPS on the sign in page as well, which means your credentials won&#039;t be leaked if someone else is on the same hotspot but sniffing the network. However, if HTTPS isn&#039;t being used, then personally I wouldn&#039;t sign in on it using a public hotspot.If you&#039;re talking about signing into accounts in general whilst using a public and free hotspot, then be careful because if the network is open for other people to connect onto, they could theoretically sniff the network (e.g. networking tools like Wireshark) and find out sensitive data such as credentials for accounts. This is only the case for HTTP though. HTTPS traffic is encrypted, so for HTTPS encrypted services, the data the attacker on the network will get won&#039;t assist them with stealing credentials.Wait for a second opinion because I am far from a networking expert - I do not even scratch the surface in that regard - and thus may be wrong.</blockquote>

[QUOTE="Eddie Morra, post: 770450"] Could you elaborate a bit more on what you mean? I think you're referring to the logins where you connect to a free hotspot and then need to sign into your subscription account to remove the restriction of the free WiFi to only the login page. If that is what you're thinking of, then my answer is going to be an assuming yes, because it would be unacceptable and ridiculous if this wasn't the case. I am pretty sure that most good ISPs that have a system like this will be leveraging HTTPS on the sign in page as well, which means your credentials won't be leaked if someone else is on the same hotspot but sniffing the network. However, if HTTPS isn't being used, then personally I wouldn't sign in on it using a public hotspot. If you're talking about signing into accounts in general whilst using a public and free hotspot, then be careful because if the network is open for other people to connect onto, they could theoretically sniff the network (e.g. networking tools like Wireshark) and find out sensitive data such as credentials for accounts. This is only the case for HTTP though. HTTPS traffic is encrypted, so for HTTPS encrypted services, the data the attacker on the network will get won't assist them with stealing credentials. Wait for a second opinion because I am far from a networking expert - I do not even scratch the surface in that regard - and thus may be wrong. [/QUOTE]

Verification