Suppose I am using public WiFi and connected to my office network through VPN. I am accessing some applications which are not SSL enabled. How easy it is for an attacker to see the traffic if he is also using the same public WiFi.

2 Answers 2


If the concern is just as far as the WiFi hotspot and the users who are connected to it, then as long as you are connected to the VPN, the traffic should be encrypted and cannot be viewed by any other WiFi user.

There are some concerns however, on the type of VPN used, which encryption method it is using, and so on. Also, I think the biggest concern would be if the VPN gets disconnected without you knowing, which would automatically fall back to unencrypted WiFi traffic.

Depending on your OS, you could configure it to stop all traffic if VPN is not connected at any point of time.

  • that's a great point considering VPN getting disconnected. Are you aware of an article which can explain how to configure my system to stop all traffic when VPN gets disconnected?
    – one
    Jul 8, 2016 at 18:15
  • Yes I read many in the past, which OS are you using?
    – Zack
    Jul 8, 2016 at 18:35
  • I am using windows 7
    – one
    Jul 8, 2016 at 18:44
  • This should get you started: bestvpn.com/blog/5142/…
    – Zack
    Jul 8, 2016 at 18:47
  • If I've connected to an evil twin wifi hotspot, could it hijack DNS so that what I believe is a trusted VPN is in fact the hacker's VPN?
    – Tim Cooper
    Jan 8, 2017 at 8:39

It is as strong as the SSL configuration of your tunnel between your laptop, and the VPN gateway.

All traffic now goes through the tunnel to the VPN gateway where it reaches out to the Internet. The VPN gateway will then ferry the response back to you.

  • 1
    Not necessarily true. There is something called split tunneling, which allows alternate traffic routes for different destinations. en.wikipedia.org/wiki/Split_tunneling
    – Jesse K
    Jul 8, 2016 at 18:23
  • 1
    If security is a concern, I would not suggest using split tunneling, especially if it is an untrusted WiFi network, and that some of that traffic ends up on HTTP sites.
    – Zack
    Jul 8, 2016 at 18:41

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .