5

Suppose I am using public WiFi and connected to my office network through VPN. I am accessing some applications which are not SSL enabled. How easy it is for an attacker to see the traffic if he is also using the same public WiFi.

5

If the concern is just as far as the WiFi hotspot and the users who are connected to it, then as long as you are connected to the VPN, the traffic should be encrypted and cannot be viewed by any other WiFi user.

There are some concerns however, on the type of VPN used, which encryption method it is using, and so on. Also, I think the biggest concern would be if the VPN gets disconnected without you knowing, which would automatically fall back to unencrypted WiFi traffic.

Depending on your OS, you could configure it to stop all traffic if VPN is not connected at any point of time.

  • that's a great point considering VPN getting disconnected. Are you aware of an article which can explain how to configure my system to stop all traffic when VPN gets disconnected? – one Jul 8 '16 at 18:15
  • Yes I read many in the past, which OS are you using? – Zack Jul 8 '16 at 18:35
  • I am using windows 7 – one Jul 8 '16 at 18:44
  • This should get you started: bestvpn.com/blog/5142/… – Zack Jul 8 '16 at 18:47
  • If I've connected to an evil twin wifi hotspot, could it hijack DNS so that what I believe is a trusted VPN is in fact the hacker's VPN? – Tim Cooper Jan 8 '17 at 8:39
4

It is as strong as the SSL configuration of your tunnel between your laptop, and the VPN gateway.

All traffic now goes through the tunnel to the VPN gateway where it reaches out to the Internet. The VPN gateway will then ferry the response back to you.

  • 1
    Not necessarily true. There is something called split tunneling, which allows alternate traffic routes for different destinations. en.wikipedia.org/wiki/Split_tunneling – Jesse K Jul 8 '16 at 18:23
  • 1
    If security is a concern, I would not suggest using split tunneling, especially if it is an untrusted WiFi network, and that some of that traffic ends up on HTTP sites. – Zack Jul 8 '16 at 18:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.