Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I will be away for 1 month and during that time period I will have Internet access only via public wifi networks.

I tried finding on the net tutorial on how to safely access and handle paypal payments, but I found advises on either buying a VPN or using Hamachi to access always-on PC. I don't have access to always-on PC and I would not like to pay for VPN if I don't have to. The other reason is that VPNs would slow down already slow public wifi connections.

Is there a way I can safely connect to public wifi and make paypal transactions?

I would be connecting to public wifis using PC laptop (win 7) or Android mobile phone.

share|improve this question

marked as duplicate by WhiteWinterWolf, Steve DL, Ohnana, Neil Smithline, StackzOfZtuff Jan 24 at 19:50

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

up vote 4 down vote accepted

Paypal transactions are already secured using SSL/TLS.

Assuming that you are using your own device that has not been compromised with malware, it should be perfectly secure to peform Paypal transactions on a public wifi network.

share|improve this answer
    
You are saying if my laptop if malware free, I can log into paypal account and make transactions without fearing of someone sneaking into them? Is the same with every HTTPS website (ebay, gmail, etc.)? – clearojne Jun 20 '13 at 11:51
    
@clearojne Yes. If a website is secured using HTTPS, the data you send over the network is encrypted. – Terry Chia Jun 20 '13 at 11:55
    
Thanks. So I will just keep attention to HTTPS sites ;) – clearojne Jun 20 '13 at 12:02
1  
@clearojne - Yes. Provided there's no rogue certificate installed on your web client to enable MiTM (Man in The Middle) attacks, then you should be secure. You should inspect the certificate used to connect to a HTTPS website though, and some plugins exist that will additionally alert you of such dangers (e.g. Certificate Patrol for Firefox), and others that will always try to load pages via HTTPS when both HTTP and HTTPS are available (e.g. HTTPS Everywhere). Also see this thread for more relevant information. ;) – TildalWave Jun 20 '13 at 12:02
2  
@clearojne also be sure that the certificate is valid – Rob Jun 20 '13 at 12:34

Not the answer you're looking for? Browse other questions tagged or ask your own question.