braindead0 wrote:
HTTPS is mostly secure. However running over a public wifi hotspot is risky, and if your device is configured to allow auto proxy discovery then you are at risk for a couple of fairly new key discovery techniques that can expose your login information and traffic. A lot depends on how good your bank security folks are and how trustworthy the WIFI operators is.
Password protected WIFI does nothing to protect user data, it's strictly a means of access control.
There are several options that can help assure your security, SSH tunnel to a known safe server, good VPN service, TOR. However all of these require proper configuration and good security practices on your end.
I would recommend paying bills on AT&T and only using public WIFI for browsing, email, things that IF someone was able to access it wouldn't mean an empty bank account. AT&T should have their 'stuff' together, and the risk of rogue proxy or MITM attacks should be minimal.
I concur. Public Wifi should be assumed to be monitored by those with malicious intent. If you are forced to use public wifi for banking or the like on a regular basis, you may want to look into a VPN service. It won't eliminate the potential to be hacked, but it will reduce it to the risk level of a cell connection/hotspot or your home internet.
(IT security guy here, btw..)