I know a year ago when signing into school wifi there were a few options. First time I had to sign into a school wifi, so I did not understand the difference. Ended up choosing a wireless option. One of the sections for that option asked to select a certificate. The options were: use system certificates/do not validate. I went with the second option since I did not know about certificates or what it referred to with system certificates. After that I choose that and put my ID and password, I clicked connect and that took me to the authentication login I normally have to sign into which sends my phone a notification to approve it is me. Then I was in. It gave that red message that connection was not private. This was on an android phone.
Recently I learned about certificates, security of websites, and dangers such as MITM attack. Basically I wanted to get an understanding of what kind of things were visible while using that wifi last year. Such as:
Websites that are HTTPS would normally not let a wifi admin see what I do on the website but only that I went to the website. If the connection is not private while using that school wifi as mentioned, are the contents of that website now visible?
Are the contents messages I send or receive such as in discord, insta, Facebook, and so on which are normally encrypted (in transit) now completely visible Or does one still have to “purposefully” MITM attack to see it?
Same for emails which are normally encrypted in transit (only thing normally visible is that is used the app, not what in the app).
Honestly, I have nothing to hide. It just really bugs me that the “specifics” of this stuff was actively monitored. Since not only my messages could have been seen but also bank account and such. I don’t mind if it shows what site I went or what app I used, what bugs me is if the “contents” are visible while the wifi connection was not private.