[lime-users] Protecting against L2 attacks

Some users are scared of using an open (no password) wireless community network. They have heard terrible things about it: If they surf the Internet without WPA2, their soul might burn in Hell. I guess the most likely attack we could suffer is some kind of Person In The Middle attack. I am trying to make a very easy list of recommendations to make users feel (and be) safer in an open wireless network. Many of them will use the network through mobile devices, mostly Android. I can think of using: - HTTPS-Everywhere add-on (I think Firefox now does not need that anymore, but not sure about Android) - Some DNS protection (I don't know much about the DNSsec, DNScrypt, DoT, etc. Maybe the easiest solution would be to simply configure a trusted DoH address in Firefox if they use a recent version of Firefox? I mean on desktops. I don't know if that is possible or easy on Android. - Tor - a VPN Any comment or any other recommendation is welcome!