03-31-2010, 02:54 AM
Not sure really. Prior use of another product or service would help. Review by a respected security conscious professional would also be nice.
I could be mistaken, but I don't see how making an SSL connection to an untrusted service is any more secure than making the original unsecured connection. Isn't the SSL connection to Hotspot Shield decrypted by Hotspot Shield? As the same process of making an SSL connection to something important like your bank's website, the end point has to be trusted. After all, the endpoint has to figure out what data you just sent it.
If you have verified the service, then great. I trust you to make good choices for your security. I have not done the necessary research yet to really comment further. I was simply speaking in generalizations. Oh, I would carefully consider if Hotspot Shield truly anonymizes traffic. Their own terms of service indicate that they have to respond to DMCA take down notifications by banning your account and I would imagine any subpoena would have to be responded to with the best of their ability to divulge any information they have about the specific user.
I could be mistaken, but I don't see how making an SSL connection to an untrusted service is any more secure than making the original unsecured connection. Isn't the SSL connection to Hotspot Shield decrypted by Hotspot Shield? As the same process of making an SSL connection to something important like your bank's website, the end point has to be trusted. After all, the endpoint has to figure out what data you just sent it.
If you have verified the service, then great. I trust you to make good choices for your security. I have not done the necessary research yet to really comment further. I was simply speaking in generalizations. Oh, I would carefully consider if Hotspot Shield truly anonymizes traffic. Their own terms of service indicate that they have to respond to DMCA take down notifications by banning your account and I would imagine any subpoena would have to be responded to with the best of their ability to divulge any information they have about the specific user.