Tag Info

New answers tagged


If you really used proper end-to-end HTTPS then nobody in between your client and the server could sniff it, no matter if VPN or not. Of course this means that there is a proper certificate validation and you did not skip warnings about invalid certificates. Thus I would consider it more probably that the data were sniffed either before they got encrypted ...


If your connection was encrypted, as long as you haven't compromised your SSL cert chain at all, and the cert for the airline you chose wasn't compromised, and you were actually connected using HTTPS, I'd say most likely you weren't MITM'd over HTTPS. What a VPN provider COULD DO, however, is set up a MITM attack by stripping HTTPS at their end and then ...

Top 50 recent answers are included