Distinguish wireless access, HTTPS and VPN protection without inferring security from a password prompt.
Predict
On café Wi-Fi, a trusted, up-to-date browser establishes valid HTTPS directly to the intended service, with no TLS inspection between them. A passive network observer records the traffic. What protects the submitted password on this path?