Originally Posted by Doppy
The problem with HTTPS is that it typically only encrypts login pages, not the content behind them. And what's more, it's very popular these days for banks and e-mail services to use the known-flawed model of security (theater) where the log-in page itself isn't actually HTTPS:
http://blogs.msdn.com/ie/archive/2005/04/20/410240.aspx
When
Microsoft of all companies is complaining of something having bad security, you know you can't trust it.
I realize that I'll have to trust the endpoint, but that's still infinitely better than having to trust anyone who is within sniffing range of WiFi or who has access to the hotel's network, for example. If I'm abroad and the endpoint is in the US, that cuts out a lot of potential attackers between me and my data.
technically, the whole site should be SSL after that, but correct that most only impliment httpS on the login and then technically all the pages html could be hacked or viewed.
Of course, most web sites don't encrypt the traffic correctly or impliment the software correct.
fidelity seems to though, if you are looking for banks and brokerages.
to the OP
there was a service a while ago, cannot remember if it was IPASS or another, that for 4.95$ a month would offer a secure VPN.
google secure access was out at that time and I was just using that when I was mobile. the google secure access is hit or miss now, I think based on location so I cannot recommend it anymore.