ATTACK OF THE EVIL BARISTAS

Summary from the TLDR InfoSec newsletter

A common cybersecurity trope is to never use unsecured, public WiFi without a VPN. The author of this article challenged this notion by monitoring the HTTPS and non-HTTPS connections made by their iPhone and Chromebook. They found that anyone monitoring their connection could only see 0.25% of requests from their Chromebook and that there were zero connections to HTTP websites and services from their iPhone.