NTP, DHCP, SNMP, FTP, SSH
- NTP just tells you time. No confidential data here.
- DHCP and SNMP dont go over the internet. A VPN won’t save you from this.
- FTP is dead. Not even web browsers support it anymore.
- SSH is already encrypted. In some cases, it can literally be used as a VPN.
Wireshark is useless on WPA3. Although hotel wifi typically doesn’t use it.
SNI is encrypted with ECH.
I disabled plaintext SMTP on my mail server years ago. Requiring TLS actually reduced spam by 99%. No reputable mail server will use plaintext.
Almost nothing uses plain HTTP. The only thing I typically see is my phone’s internet connectivity check, which simply returns an HTTP 204 (No content). It’s practically a ping.
HTTPS + DoH is enough because all of these problems are solved.