Imagine the following scenario:
- Users connect to an open WiFi network (no password, no encryption)
- All users stick to secure transmission protocols for all confidential data (HTTPS, SSH, VPN, etc.)
- Users devices do not accept any inbound connections
Would this scenario provide a reasonable level of security for the users involved? Or perhaps more importantly, does a malicious user's presence on an unencrypted WiFi network pose a known threat to the other users?