Reply to thread

Message

<blockquote data-quote="Cr00zng" data-source="post: 1880574" data-attributes="member: 318059">That depends... If you take the Ferrari once a week, preferably weekday to the grocery store, that would be a OK... <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite2" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" /> <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite1" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />Unless the VPN is directly to the financial institution, the VPN doesn't really provide you an extra layer of security. Theoretically, the VPN gateway could terminate your SSL/TLS tunnel to the bank and intercept your connection to the bank. Back in my corporate days, we had Blue Coat proxy servers, that did that routinely for monitoring the SSL/TLS traffic. We had to make an exception for financial institutions for preventing the sessions to banks from being recorded in the logs in plain text. That's how we monitored SSL/TLS connections to forums, social networks, etc., and quite of few people got &quot;dinged&quot; for abusive&nbsp; behavior on the web. While we did warned the employees that it is coming, they didn't take it seriously until couple of them got dinged...</blockquote>

[QUOTE="Cr00zng, post: 1880574, member: 318059"] That depends... If you take the Ferrari once a week, preferably weekday to the grocery store, that would be a OK... ;) :) Unless the VPN is directly to the financial institution, the VPN doesn't really provide you an extra layer of security. Theoretically, the VPN gateway could terminate your SSL/TLS tunnel to the bank and intercept your connection to the bank. Back in my corporate days, we had Blue Coat proxy servers, that did that routinely for monitoring the SSL/TLS traffic. We had to make an exception for financial institutions for preventing the sessions to banks from being recorded in the logs in plain text. That's how we monitored SSL/TLS connections to forums, social networks, etc., and quite of few people got "dinged" for abusive behavior on the web. While we did warned the employees that it is coming, they didn't take it seriously until couple of them got dinged... [/QUOTE]

Verification

Name this item. 🍎