Why HTTPS alone won’t keep you safe on public WiFi

Simple tricks to be more anonymous online
June 28, 2019
How to manage your privacy on Google
July 27, 2019

Why HTTPS alone won’t keep you safe on public WiFi

Most websites now use HTTPS to encrypt your connection and add an additional layer of protection to your data. But if you are on public WiFi, using HTTPS without a VPN means that some of your data will still be vulnerable.
Edit: An earlier version of this blog post could have been misunderstood as implying that TLS 1.2 has been broken. We have removed the section which can cause this confusion.

The Hypertext Transfer Protocol Secure, or HTTPS, encrypts the traffic between your device and a website, making it difficult for intruders to observe the information being shared. It also provides signatures, or HTTPS certificates, that allow you to verify that the site you are on is run by whom it claims it to be. HTTPS has become a standard security feature for nearly all websites.

If HTTPS encrypts your connection with a site, then isn’t public WiFi safe? Unfortunately, HTTPS does not encrypt all your data, like DNS queries. If you are using public WiFi without a VPN, you are putting yourself at risk.

How HTTPS works
HTTPS uses the Transport Layer Security (TLS) protocol to secure the connection between a web browser and a website. A protocol is simply a set of rules and instructions that govern how computers communicate with each other. The TLS protocol is the backbone of securing online connections. It’s what allows you to enter your login credentials, browse websites, or perform online banking without others seeing the contents.

TLS uses private-key cryptography. A key is simply a code for computers involved in message transmission, and a private key is one that is not open to the public. To ensure the integrity of their connection, your browser and the Internet server initiate a “handshake” by sharing a public key. Once the handshake is established, the server and browser negotiate private keys to encrypt your connection. Each connection generates its own, unique private key, and the connection is encrypted before a single byte of data is transmitted. Once the encryption is in place, intruders cannot monitor or modify the communications between the web browser and website without being detected.

TLS also supplies digital certificates that authenticate the credentials of websites and let you know that the data is from a trusted source (or a site who claims to be one). A digital certificate is issued by a certification authority.

This system still has certain vulnerabilities, as we will discuss below, but it is considered secure. The first vulnerability that using public WiFi without a VPN exposes you to is the fact that TLS does not protect domain name system (DNS) queries (yet).

What is a DNS query?
The domain name system translates human-friendly URLs into numerical IP addresses that computers can understand. For example, to visit our site, you type in the URL www.vpn.arexgo.com, but your computer sees it as [185.70.40.231]. To find this number, your web browser uses what is called a DNS resolver, which is usually supplied by your Internet service provider. Think of this resolver as a sidekick who scurries around translating the URL of the site you wish to visit into its IP address.

Your DNS request is not encrypted. An intruder can observe your DNS queries and your DNS resolver’s responses to them. This leads us to the first attack you could suffer if you use public WiFi without a VPN: DNS leaks.

DNS leak
If someone were to monitor your DNS queries, they would have a list of all the sites you visited along with your device’s IP address. Given the weak security of most public WiFi hotspots, it would be relatively simple for an intruder to gain access to the network and then log your DNS queries. Your data could still be at risk even if there is no intruder because the resolver on the public WiFi could harvest your data itself.

DNS spoofing
A DNS leak allows an intruder to monitor your activity, but if an attacker spoofs your DNS requests, they can redirect you to a malicious site they control. Also known as DNS poisoning, this happens when an attacker pretends to be your DNS resolver. The attacker then spoofs the IP address for a target website and replaces it with the IP address of a site under their control. The URL would be the same as the site you were intending to visit, but the site would be under the control of the attacker. Modern browsers will generally alert users that they are on a site without HTTPS, and this attack won’t work for HTTPS sites that have a certificate.

However, with a variation of DNS spoofing, an attacker could send you to a site with a slightly different URL from the one you were intending to visit. Think “vpn.arexgo.com” instead of “vpn.arexgo.com”. Moreover, this type of fake site can use HTTPS and have a valid certificate. Your browser would show a green lock next to address, making it harder to detect.

Punycode
Unfortunately, with recent Punycode attacks, hackers have found a way to make two websites with the same URL and a valid HTTPS certificate. Punycode is a type of encoding used by web browsers to convert all the different Unicode characters (like ß, 竹, or Ж) into the limited character set (A-Z, 0-9) supported by the international domain names system. As an example, if a Chinese website used the domain “竹.com”, in Punycode, that would be represented by “xn--2uz.com”.

Intruders discovered that if you reverse the process and enter Punycode characters as a domain, as long as all the characters are from a single foreign language character set and the Punycode domain is an exact match as the targeted domain, then browsers will render it in the targeted domain’s normal language. In the example used in The Hacker News article linked above, a researcher registered the domain “xn--80ak6aa92e.com” which appeared as “apple.com”. The researcher even created this fake apple site to demonstrate how hard it is to tell the sites apart using URL and HTTPS information alone.

As the researcher’s example demonstrates, a Punycode site can implement HTTPS and receive a valid certificate, making it very hard for you to detect you are on a fake site. Only by examining the actual details on the HTTPS certificate can you differentiate between “xn--80ak6aa92e.com” and “apple.com”.

Fortunately, many browsers have already addressed this vulnerability and most would now show the address as xn--80ak6aa92e.com

Use a VPN on public WiFi
These are just some of the vulnerabilities you face when using an unsecured public WiFi network. Even if you visit a legitimate site with properly enforced HTTPS, it could contain images or scripts from sites not protected by HTTPS. An attacker could then use these scripts and images to deliver malware onto your device.

A trustworthy VPN can protect you from all of these vulnerabilities. A VPN encrypts your traffic and routes it through a VPN server, meaning that your Internet service provider (or the owner of a malicious WiFi hotspot) cannot monitor your online activity. This additional encryption will protect your connection from a TLS downgrade attack.

Thorough VPN services, like ArexVPN, also run their own DNS servers, so that they can encrypt and process your DNS queries. ArexVPN’s apps protect you from a DNS leak by forcing your browser to resolve DNS queries via our DNS servers. We even protect your DNS queries if you are disconnected. Our Kill Switch feature instantly blocks all network connections if you are disconnected from your VPN server, keeping your data from being exposed.

ArexVPN’s Free VPN plan offers everyone a free, simple way to protect their Internet connection against these attacks. With our free VPN service, you never have to use public WiFi without a VPN again.

70 Comments

  1. Lynell says:

    If you desire to improve your know-how simply keep visiting
    this site and be updated with the most recent information posted
    here.

  2. I blog frequently and I truly appreciate your information.
    The article has really peaked my interest.
    I’m going to bookmark your website and keep checking for new details about once per week.
    I opted in for your RSS feed too.

    Feel free to visit my web site – https://www.qoocle.com/groups/6-to-help-accelerate-reduction-and-drop-pounds-567995173/

  3. Lesley says:

    Howdy! I know this is kinda off topic however , I’d figured I’d ask.
    Would you be interested in exchanging links or maybe guest authoring
    a blog post or vice-versa? My website covers a lot of
    the same topics as yours and I think we could
    greatly benefit from each other. If you might be interested feel free to shoot me an e-mail.
    I look forward to hearing from you! Superb
    blog by the way!

  4. Erma says:

    WOW just what I was searching for. Came here by searching for website

  5. Rena says:

    I used to be able to find good information from your articles.

  6. Right here is the right webpage for anyone who wants to understand this topic.
    You realize a whole lot its almost tough to argue with you
    (not that I really would want to…HaHa). You certainly put a new spin on a topic that’s been discussed for ages.
    Wonderful stuff, just wonderful!

  7. I do agree with all of the concepts you’ve introduced on your post.
    They’re very convincing and will definitely work. Nonetheless,
    the posts are very short for starters. May you please lengthen them a bit from subsequent time?
    Thank you for the post.

    Also visit my web page; Purely Roots CBD

  8. Excellent post. I was checking continuously this blog and I’m impressed!
    Very helpful information specifically the last part 🙂 I
    care for such information much. I was seeking this
    particular info for a very long time. Thank you
    and best of luck.

    my page … https://payadsocial.com/index.php/Samira6090280517

  9. I’m impressed, I have to admit. Rarely do I come across
    a blog that’s both equally educative and engaging,
    and let me tell you, you’ve hit the nail on the head.

    The problem is something which too few men and women are speaking intelligently about.
    Now i’m very happy I came across this during my hunt for something relating to this.

    Feel free to surf to my web page :: How Terminate Smoking Marijuana Help

  10. What i do not understood is in truth how you are not really a lot more smartly-appreciated than you might be right now.

    You are very intelligent. You know thus considerably
    on the subject of this subject, made me personally consider it from so many various angles.
    Its like women and men are not involved except it is one thing to do with Lady gaga!

    Your own stuffs outstanding. All the time care for it up!

    Feel free to surf to my web page … https://medchoicecbd.org/

  11. I think this is one of the such a lot significant info for me.
    And i’m satisfied reading your article. However should remark on few general things, The web site taste is wonderful, the articles is
    actually nice :D. Good activity, cheers.

    my web blog: http://bellaeffectagelessmoisturizer.com/

  12. Desiree says:

    Excellent post. I was checking constantly this blog and I’m impressed!
    Extremely helpful info specifically the last part 🙂 I care for such info much.
    I was looking for this particular info for a long time. Thank you and best of luck.

  13. Awesome issues here. I am very satisfied to look your article.
    Thank you so much and I am having a look forward to contact you.
    Will you kindly drop me a e-mail?

    my web page: Redwood Lodge CBD Reviews

  14. Hurrah, that’s what I was looking for, what a stuff! existing here at this
    website, thanks admin of this web site.

    Here is my blog: VeloGrowth Review

  15. Modesto says:

    I think this is among the most vital info for me. And i’m
    satisfied reading your article. But want to statement on few
    normal things, The site taste is perfect, the articles is really nice : D.
    Just right activity, cheers

  16. great post, very informative. I wonder why the opposite experts of this sector don’t understand this.

    You should proceed your writing. I am sure, you have a great readers’ base already!

    Also visit my website; TR1 Testo Boost Reviews

  17. I’m amazed, I must say. Rarely do I come across a blog that’s both educative and interesting, and let me tell you,
    you have hit the nail on the head. The problem is an issue that not enough people
    are speaking intelligently about. Now i’m very happy
    that I found this during my hunt for something concerning this.

    Feel free to visit my website – Formula Swiss CBD Oil Reviews

  18. I regard something genuinely special in this website.

    Also visit my blog post … Keto Extreme Fat Burner Reviews

  19. Simply to follow up on the up-date of this topic on your web
    site and would like to let you know just how much I loved the time you took to create this
    beneficial post. Inside the post, you actually spoke of how to seriously handle this matter with
    all convenience. It would be my own pleasure to collect some
    more thoughts from your web page and come up to offer some
    others what I discovered from you. Thank you for your usual terrific
    effort.

    my blog … http://www.fivedollarclassifieds.com/user/profile/147824

  20. Hello, Neat post. There’s an issue together with your
    web site in internet explorer, may check this…
    IE still is the market leader and a big component to other people
    will miss your wonderful writing because of this problem.

    Here is my web-site; Generation Keto

  21. Taip says:

    Hello i am kavin, its my first occasion to commenting anywhere, when i
    read this paragraph i thought i could also make comment due to this good article.

    My web site; Taip

  22. That is really fascinating, You’re a very professional blogger.
    I’ve joined your rss feed and sit up for searching for more of your excellent post.
    Also, I have shared your web site in my social networks!

    Have a look at my web-site :: Relieve CBD Tincture

  23. Heya i am for the first time here. I found this board and I in finding It truly useful &
    it helped me out a lot. I am hoping to give one thing again and aid
    others like you aided me.

    Feel free to surf to my website: http://releafedcbdtincture.com/

  24. Howdy I am so excited I found your weblog, I really found you by mistake, while I was looking on Yahoo for something else, Regardless I am here now and would just like to say cheers for a fantastic post and a all round exciting blog (I also love the theme/design),
    I don?t have time to browse it all at the minute but I have saved it
    and also added your RSS feeds, so when I have time I will
    be back to read a great deal more, Please do keep up the superb
    jo.

    My web site – https://formulaswisscbd.com/

  25. I always used to read piece of writing in news papers but now as
    I am a user of internet so from now I am using net for articles or reviews, thanks
    to web.

    My web page: http://usadsciti.com/user/profile/94972

  26. Appreciation to my father who stated to me concerning this
    weblog, this webpage is actually remarkable.

  27. Excellent post. I was checking continuously this weblog and I’m inspired!
    Very useful info specifically the closing phase 🙂 I take care of such info a lot.
    I used to be seeking this certain info for a long time.
    Thanks and best of luck.

  28. Definitely consider that that you said. Your favorite justification seemed to be at
    the internet the simplest thing to be mindful of. I say to you, I
    certainly get irked whilst people think about issues that they
    just do not understand about. You managed to hit the nail upon the highest as smartly as outlined out the entire thing with no need side effect , folks can take a signal.
    Will probably be back to get more. Thanks

  29. Great post, I think blog owners should acquire a
    lot from this website its very user pleasant. So much wonderful information on here :
    D.

    my page; Oxyphen Keto Xr Reviews

  30. Hi there i am kavin, its my first occasion to commenting anywhere, when i read this piece
    of writing i thought i could also make comment due to this brilliant post.

    my web blog; https://indicativecbd.com/

  31. Perfectly indited content, regards for information.

    Also visit my web blog اینجا(+)

  32. It’s actually a nice and useful piece of info.
    I am happy that you simply shared this helpful info
    with us. Please stay us up to date like this. Thank you for sharing.

    my web page … Generation Keto Pills

  33. Good blog! I truly love how it is easy on my eyes and the data are well
    written. I’m wondering how I might be notified when a new post has been made.
    I’ve subscribed to your RSS which must do the trick! Have a great day!

    Feel free to visit my webpage Green Health CBD Tincture

  34. 顺丰快递 says:

    I’d like to thank you for the efforts you’ve put in penning this site.
    I am hoping to see the same high-grade content from you in the future as well.
    In fact, your creative writing abilities has encouraged
    me to get my own, personal site now 😉

  35. Dominik says:

    Hello, There’s no doubt that your site might be having web browser compatibility problems.

    Whenever I take a look at your website in Safari, it looks fine but when opening in Internet Explorer, it’s got some overlapping issues.

    I merely wanted to give you a quick heads up! Other than that, wonderful
    blog!

  36. Wow, superb blog layout! How long have you been blogging for?
    you make blogging look easy. The overall look of your
    website is wonderful, as well as the content!

    Feel free to visit my webpage http://topburnketo.org/

  37. I am lucky that I discovered this blog, exactly the right information that I was
    looking for!

    Here is my page Optimal Life Keto Review

  38. Hi there i am kavin, its my first time to commenting anyplace, when i read this paragraph i thought i could also make comment due to this sensible post.

    Also visit my web page – https://onlyfullmovies.com/groups/how-get-weight-and-build-mass-without-fat-1164347723/

  39. Definitely believe that which you said. Your favorite reason appeared to be on the
    internet the easiest thing to be aware of. I say to you,
    I certainly get irked while people consider worries that they just do not know about.
    You managed to hit the nail upon the top as well as defined out the whole thing without having side-effects ,
    people can take a signal. Will likely be back to get more.

    Thanks

  40. My brother recommended I might like this web site.
    He was totally right. This post actually made my day.
    You can not imagine just how much time I had spent for this information! Thanks!

    Feel free to surf to my web blog; Ultra Keto White Reviews

  41. I’ve been surfing online more than three hours today, yet
    I never found any interesting article like yours. It’s pretty worth enough for me.
    Personally, if all website owners and bloggers made good
    content as you did, the net will be a lot more useful than ever
    before.

    Here is my web page :: UltraSonic Keto

  42. This is a very good tip particularly to those new to the blogosphere.
    Brief but very accurate information… Thank you for sharing
    this one. A must read article!

    my web page – Redwood Lodge CBD Review

  43. Real great information can be found on web blog.

    Here is my web blog; http://vytalyzecbd.org/

  44. Maple says:

    Hi there i am kavin, its my first occasion to commenting anywhere, when i
    read this post i thought i could also make comment due to this sensible article.

  45. Priscilla says:

    I don’t know whether it’s just me or if everyone else experiencing problems
    with your site. It appears as if some of the written text
    within your posts are running off the screen. Can somebody else please comment and let me know if this is happening to them as
    well? This might be a problem with my web browser because I’ve had this happen before.
    Kudos

  46. Rae says:

    Hi I am so delighted I found your site, I really found you by error, while I was looking on Askjeeve for something else, Nonetheless I am here now and would just like to say
    cheers for a tremendous post and a all round exciting blog (I also love the
    theme/design), I don’t have time to read it all at the minute but I have bookmarked it and also
    added in your RSS feeds, so when I have time I will be back to read
    much more, Please do keep up the excellent work.

  47. 真空烘箱 says:

    I am really loving the theme/design of your blog. Do you ever run into any browser compatibility problems?
    A number of my blog visitors have complained about my site not working correctly in Explorer but looks great in Opera.
    Do you have any advice to help fix this problem?

  48. noflam says:

    What’s up everyone, it’s my first go to see at this web page, and piece of writing is in fact fruitful in favor of me, keep up posting these types of articles.

    Look at my homepage :: noflam

  49. Somebody essentially lend a hand to make seriously articles I might state. That is the first time I frequented your web page and up to now? I amazed with the research you made to make this actual post extraordinary. Fantastic job!

  50. 카지노 says:

    Great work! This is the type of information that are meant to be shared around the net. Shame on the search engines for not positioning this put up upper!

  51. Wow, superb blog layout! How long have you been blogging for? you made blogging look easy. The overall look of your website is great, as well as the content!

  52. Good day! Do you know if they make any plugins to safeguard against hackers? I’m kinda paranoid about losing everything I’ve worked hard on. Any suggestions?

  53. This post is worth everyone’s attention. How can I find out more?

  54. i love this just right post

  55. Well I sincerely enjoyed studying it. This article provided by you is very constructive for good planning. Conni Vergil Nafis

  56. Hey very interesting blog!

    Visit my blog post ManDime Male Enhancement

  57. I have noticed that online diploma is getting popular because accomplishing your degree online has turned into a popular selection for many people. Many people have certainly not had a possible opportunity to attend a normal college or university however seek the improved earning possibilities and career advancement that a Bachelor Degree gives you. Still other folks might have a diploma in one discipline but want to pursue a thing they now develop an interest in. Marlin Younge

  58. full hd izle says:

    Really informative post. Great. Quinton Eckhart

  59. Thanks-a-mundo for the blog.Really thank you! Really Great. Arron Stromme

  60. joni brower says:

    I think it is a fluent sharing, I will recommend your site to my friends

  61. Greate article. Keep writing such kind of info on your blog.

  62. Very informative blog article.Much thanks again. Fantastic.

  63. Very informative blog article.Much thanks again. Fantastic.

  64. Thanks for your own work on this website. My mum takes pleasure in setting aside time for research and it is simple to grasp why. We notice all relating to the powerful way you provide very important tips and hints via your website and therefore strongly encourage response from visitors on this theme while our own simple princess is without a doubt understanding so much. Take pleasure in the rest of the year. Your performing a useful job.

  65. I’m also commenting to let you be aware of of the cool discovery my child encountered checking your blog. She came to understand a wide variety of details, most notably how it is like to have a marvelous coaching heart to get folks easily fully grasp a variety of complicated matters. You actually did more than my desires. I appreciate you for delivering such good, dependable, edifying and also cool guidance on that topic to Evelyn.

  66. I precisely desired to say thanks again. I’m not certain the things I could possibly have carried out in the absence of the actual creative concepts discussed by you concerning my concern. It absolutely was a daunting concern for me personally, but coming across a new professional avenue you handled it forced me to cry for delight. I’m grateful for the assistance and as well , expect you comprehend what a powerful job that you are carrying out educating men and women by way of a web site. I am certain you’ve never come across all of us.

  67. venlafaxine says:

    Thank you for your entire labor on this web site. My mom take interest in participating in investigations and it is obvious why. My partner and i learn all regarding the lively tactic you produce simple thoughts through your web site and in addition invigorate response from the others on the subject then our favorite princess is truly studying a whole lot. Take advantage of the rest of the year. You have been doing a superb job.

  68. It was very useful, I can say it was a useful article for me.

  69. Thanks for your whole work on this website. My niece takes pleasure in working on research and it is simple to grasp why. We all notice all relating to the powerful ways you render worthwhile tricks via your website and therefore welcome response from website visitors on this topic while our own simple princess is without question understanding so much. Take pleasure in the rest of the year. Your performing a wonderful job.

  70. Irene says:

    I am thinking of visiting your website again Thanks

Leave a Reply

Your email address will not be published.