I am curious how safe I am if I use telnet through a VPN-tunnel to my webhotel?
ID: 658114 • Letter: I
Question
I am curious how safe I am if I use telnet through a VPN-tunnel to my webhotel? I thought that the information was encrypted between my computer to the vpn-providers default-gateway. But when it leaves the gateway on its way (through internet) to my webhotel its no longer encrypted? This is just a guess - Am I completely wrong? I sent this question to my vpn-provider in Sweden (dold.se) and got the answer (without tecnical explanation) - YOU ARE COMPELTELY SAFE USING OUR SERVICE
Would be glad if someone could explain how it really works in this case. I am just curious and normally use an SSH-klient (putty) to connect
Explanation / Answer
So you pretty much answered the question, telnet is protected as long as it is in the VPN however there are a couple of thing you must realize.
1. VPN does not protect against software running your computer, that is, if you have a piece of malware it may packet sniff your telnet session and get the password on your local computer before it goes into the VPN.
2. Where ever the VPN ends you are going clear text, this may not be an issue if the VPN terminates into a known secure network however, how many of those are there out there?
3. As I am sure you already know, if at all possible just use SSH, even across a VPN if the information is important.
Whether you are safe is a tough one, in general the only time I ever use telnet is for temporary access to set up SSH, I would suggest everyone do the same.
As a general rule, I do not trust anything I do not manage or control, even then it is dependent on where the devices are placed. I am not sure what a web hotel is or how you are using it but it sounds like it is out of your control so take appropriate precautions.
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.