On 20/05/16 19:54, Phil W Lee wrote:
> Plusnet Support Team <
sup...@plus.net> considered Thu, 19 May 2016
> 12:43:38 +0100 the perfect time to write:
>
>> On 17/05/2016 15:58, Nigel Wade wrote:
>>> On 17/05/16 15:43, Plusnet Support Team wrote:
>>>>> Just use a packet capture (tcpdump, wireshark) program to look at the
>>>>> transactions.
>>>>
>>>> Easier said than done using an iPhone/iPad ;)
>>>
>>> A damn sight easier than it ought to be, given that you don't use
>>> encryption though.
>>
>> I walked right into that ;)
>
> If someone is using WiFi to connect to their own network, I'd expect
> them to be using encryption on that anyway - particularly if they are
> even slightly concerned about security!
That's only encrypted as far as the WiFi access point. After that it will be unencrypted.
Particularly, once that connection leaves your house and goes onto the Internet then anyone along the way can intercept
it. If you get into the habit of setting up your mobile device to automatically connect and check your email, relying on
your home WiFi encryption, but also have it setup to connect to any available WiFi hotspot then your personal login
credentials are not going to stay personal for very long.
> Emails are almost all sent between servers without encryption, so
> there's not much additional benefit in encrypting them between server
> and end-user.
But that mail is not carrying authentication tokens.
> It's all a matter of putting the priority in the right order - where,
> other than in the wireless part, is your email likely to be
> intercepted? If we want to be paranoid, we would all be using
> encrypted tunnels to VPN servers layered one on another (and that
> email would be encrypted itself, anyway). but for the majority of
> traffic, why bother?
>
So, you don't care is someone else intercepts your login credentials for your ISP, and gets access to all your ISP mail,
your ISP account information, payment methods etc?
What about the login credentials for your internet banking? Are you as blase about those?