Security Question VPN/Wifi

[Dejv]

I have a query regarding security.

Scenario 1 - Lets say I am at a restaurant and am currently connected with my laptop to a password protected wifi (restaurant wifi).

If I connect vpn to my work, when connecting are the credentials used encrypted and secure? and even if I am using a vpn if I do remote desktop is totally safe or there still not 100% safe?

Scenario 2 - same as above however connecting to an unsecured wifi.

[brad (Br@d)]

There is not much difference between a open public wifi and one that has a psk. Since everyone including the bad guys know the psk it is trivial to decrypt captured traffic.

Your VPN is negotiation secure connection between the 2 ends. This creates a secure encrypteded tunnel that can not be decrypted by anyone on the open or secure wifi.

[scottelkins (M7-Scott)]

I agree with Br@d. Assuming the VPN is setup properly, no one should be able to sniff the traffic and decode it - open or “secure” WiFi.

I will add that even though you are connected securely using VPN, this does not protect the computer you are using from intruders. If they breach the laptop, they have access to the keys to decode traffic. Security is about layers and acceptable risk.

[christopher001]

If you are using asymmetric encryption with the VPN the connection is secured regardless of what network you are transferring Data over.

https://www.usna.edu/CyberDept/sy110/lec/cryptAsymmEnc/lec.html

[christopher001]

@scottelkins

I agree with Br@d. Assuming the VPN is setup properly, no one should be able to sniff the traffic and decode it - open or “secure” WiFi.

I will add that even though you are connected securely using VPN, this does not protect the computer you are using from intruders. If they breach the laptop, they have access to the keys to decode traffic. Security is about layers and acceptable risk.

He makes a good point, do keep in mind that the traffic cannot be compromised but your machine can.

[mattradatti (Matt8585)]

I wouldn’t do it

[Kenny8416]

As others have said, the VPN would be secure, but it’s not impossible that a bad actor could install a keylogger on your PC via the public wifi and get your passwords that way. 2FA can help with this aspect at least.

Nothing is 100% secure though, so it’s a balance of risk vs reward.

Personally I would set up my mobile as a hotspot and connect the vpn via that route rather than a public wifi hotspot. At least you can monitor the connections to the phone hotspot then.

[Dejv]

thanks all for your feedback from now on will be connecting via my mobile hotspot

[Dejv]

thanks all for the input.