• pHr34kY@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    2 days ago

    NTP, DHCP, SNMP, FTP, SSH

    • NTP just tells you time. No confidential data here.
    • DHCP and SNMP dont go over the internet. A VPN won’t save you from this.
    • FTP is dead. Not even web browsers support it anymore.
    • SSH is already encrypted. In some cases, it can literally be used as a VPN.

    Wireshark is useless on WPA3. Although hotel wifi typically doesn’t use it.

    SNI is encrypted with ECH.

    I disabled plaintext SMTP on my mail server years ago. Requiring TLS actually reduced spam by 99%. No reputable mail server will use plaintext.

    Almost nothing uses plain HTTP. The only thing I typically see is my phone’s internet connectivity check, which simply returns an HTTP 204 (No content). It’s practically a ping.

    HTTPS + DoH is enough because all of these problems are solved.