This is a copy of a post from one of the forums that I am a member of.  It seems to conflict with information about https that I think I learned from you.  Could I request your comments about this and suggestions?

Quote

“There is a lot of misinformation about the safety and security of your computer
connecting to various types of networks. And since those of us in an RV spend a
lot of time traveling, we need to understand what is safe to use and what is
not.

First, a couple of disclaimers…
There is no such thing as absolutely secure and security is continuously
changing. Example: an encryption that is viewed as secure today might not be
secure tomorrow as computers grow in capability.
There are always some risks to security; some people are more comfortable with
risk than others.

So here are the typical networks we might encounter as we travel.

Open WIFI �” Just say no.
When you connect to an Open WIFI, you open yourself to all sorts of attacks.
Everyone else can see what you are doing and can attack your computer and
potentially your identity. (search for “firesheep”)
And you have to trust the owner of the WIFI network (I wouldn’t trust anyone
running an open WIFI).
Even https doesn’t provide adequate protection because your computer can be
attacked by others in the WIFI network (are you sure your computer is up to
date?) and the provider of the network can redirect requests via an attack
strategy called “man in the middle” (search for “man in the middle”).
And by the way, if you try to take advantage of an open WIFI you just happen to
“find” be aware that in some jurisdictions, that may be considered
“theft”.
I have a computer (yes, I carry multiple) that has no personal information and I
never connect to anything that requires a password with this computer. If
anything goes wrong with this machine, I wipe the disk and reinitialize. That is
the ONLY machine I would attach to an open WIFI and all I would do is check the
news, read online docs, listen to music, etc.

Encrypted WIFI �” Better but risky.
First, if the WIFI is encrypted with a security type of WEP, then it is not
really encrypted in a way that is safe. WEP WIFI networks are as dangerous as
open WIFI. WIFI must be encrypted with some form of WPA to be considered secure.
A WPA encrypted WIFI all but eliminates attacks from others that are on the same
WIFI network. But you still need to trust the provider of the network. For
example, how much do you want to trust Joe’s Pizza WIFI? (see “man in the
middle”)
I might read email on such a network but except in an extreme emergency I would
not perform financial transactions on such a network. And I would make certain
that my system was up to date and my personal firewall was functioning. And I
would make sure I had some level of trust in the provider of the network.

Your own encrypted WIFI via your own router �” the best answer
Use a router that connects to the cell network and provides a local WPA
encrypted WIFI (sometimes called a MIFI). No one else is on the network except
your machines. You control the router. You know the network provider (your cell
provider). And the added bonus is that the computers on this network are hidden
from the outside world all but preventing inbound attacks. This (see “network
address translation”) provides a very strong firewall.
When traveling, this is the only network on which I will perform financial
transactions.

Points of discussion:
Q: Doesn’t https provide a secure, encrypted connection?
A: Think of https as providing a very strong pipe from your computer to another
computer. In general, the pipe will not leak, that is, no one will be able to
pull data out of the pipe. This is all true. However, there are ways to redirect
the pipe so that it doesn’t really go where you expect it to go. So the
communication in the pipe is secure but it can get to the wrong organization /
person. (see “man in the middle”)
Also, if your computer has been previously compromised, https provides no
protection.

Q: Isn’t an encrypted WIFI as safe as data connections to cell networks (3G,
4G, ?)?
A: Not always. A cell network can be worse than a WPA encrypted WIFI or it can
be equivalent when it comes to communication (cell data networks are not in my
areas of expertise). But that isn’t the only issue. The good news with cell
networks is that you know who is on the other end (Verizon, ATT, Sprint, etc.).
When you use someone’s wireless, the answer might be less clear and you
probably do not have a financial connection with the provider. Again, I always
want to be sitting behind a router that I control.”

End Quote

Thanks

Al Wilson