That's a very good point.

The key is in finding a VPN host that handles a lot of traffic. And if you are passing encrypted https packets back and forth, they have to do a lot of work to see what everyone is passing through their own site, even if they wanted to.

It is one thing to be passing data packets, even encrypted data packets, with very critical data like financia data. Still dangerous.

But, if I pass a lot of web surfing encrypted data through a busy VPN, they are going to have a hard and expensive time decoding it all.

So, can it be cracked? Yes.

Is it worth it? No, not usually.

But, people here give it to them free!

Make them work for it!

Let me give you an example.

I might pass encrypted https packets through my VPN once in a while. But, I might surf everyday using my VPN connecting to https encrypted sites like GLP. Not much good stuff to see there.

It's all about heavy bandwidth usage to protect yourself from your own VPN host.