SSL & Unencrypted wireless network

[axemanxt40]

Hey guys I had a question regarding whether it is risky to transmit data (such as logging into your online banking, paypal, etc.) over an unencrypted WIFI network even though each of the respective sites use SSL?

 

[LuDaCriS66]

Yes, it is still risky.... but should be okay as long as you don't accept suspicious SSL certificates

 

[JackMDS]

I would not do it.

There might be enough clear text prior to the kick in of the SSL that can provide personal info.

 

[WobbleWobble]

Yes, it's possible to do a man-in-the-middle on SSL sessions. In fact, we're going to roll out an Internet gateway here at work that intercepts SSL traffic on our network that does sort of the same thing.