n7bsn wrote:
Some thoughts... yes httpS is encrypted (128 bit for the most part), and very safe. Not perfectly safe though!! It is possible for a "blackhat" computer, on the same local network (like the local wifi) to capture the handshakes that establish the encryption between your computer and your banks computer and thus have both "keys".
Mind you it's really unlikely.
Some number of campgrounds (10%, 15%, ??) we have stayed at have "private" wifi, where you need the passcode to access. The problem here is, everyone there, and everyone who has stayed there since the last time they changed the code, and everyone that got the code from some friends, have the passcode.
So the campgrounds with secure wifi systems are not really that much more secure then "open" wifi systems.
The Credit Union I bank with wouldn't care if some Bozo had both my account-name and password and tries to access my account with his computer as it would stop at the point and tell the Bozo to enter the ADDITIONAL passccode they just called my home-phone with. The only way to change the phone number they send the passcode to is to go into the bank.
As for banking, if you have a smartphone, check with your bank to see if they "have an ap", both my credit union (personal) and commercial bank have secure "APs" for Android and I-OS.
because they give you a passcode and not some 26 digit number they are using WPA security. everyone gets the same initial key, but the algorithm for the connection key is protected and each connection gets the next key differently. the odds of having the same next key are astronomical, and the key constantly changes, unlike the old WEP approach. so you WANT them to give you the initial passcode.
also, snooping the initial key exchange (if possible) will get you not a lot, depending on the router setting, the key will change every 1 to 20 minutes usually.
(different one for each client device connection)