Correct me if I am wrong: If you use https, you communication with a server is secure because it is encrypted. If my computer is connected to a wireless network and someone can see all the raw data/traffic between me and the wireless router, then they only see encrypted communication. The only thing they can see is what website/ip address that I connected to.
Is this correct?
I have heard a couple of times now that you still really shouldn't be accessing your bank account at a coffee shop becuase hackers can "do things" unless you use a VPN. This is, for example, mentioned in this Youtube video.
In the video linked about it is mentioned that an attacker can use devices and techniques to actually get a lot of information.
My questions are:
- What types of devices and general methods can be used to gain this information?
- What type of information can the attacker extract? If the traffic is encrypted, how can the attacker see any of that communication? Can they, for example, see the balance on my account?