We use Odoo ERP in our office and there is a statement in the documentation which says:
Whether it's accessed via website/web client or the webservice, Odoo transmits authentication information in cleartext. This means a secure deployment of Odoo must use HTTPS3.
It got me thinking since we mainly access the server locally or through PPTP VPN connection do we still need to secure the connection using SSL?
And if so, how do we achieve it since SSL is tied to a domain name while we only use IP Address.
I read that Windows PPTP VPN has built in encryption engine is it secure enough?
And there is this concern about sniffing software like wireshark that can decrypt local wifi WPA2PSK connection. Tutorial to do that. And we also access the server through public WiFi connection which means that the key is shared to everyone.
What is the best way to secure all of these connections (LAN, Wifi LAN, PPTP VPN)?