My default assumption for public WiFi is that someone is listening. Since I&#x27;ve got a GSM access point in my pocket, I always tether that instead -- sure it can be spoofed and my carrier can behave badly, but spoofing is less likely and my carrier could hit me with a drone strike anyway. Anyway, using my phone is easier because configuration is consistent, the price is the latency of establishing a new connection.<p>In regard to a university network, there are lots of smart people who could have black or grey hacked the system. Or the university could just be exercising their position of power.<p>In answer to the larger question, yes a Man in the Middle [MTM] attack on SSL&#x2F;TLS allows eavsdropping.<p>Good luck.