content: Not directly. SSL encrypts all sensitive information (and sometimes all traffic) on legit sites. Obviously, if the router is spoofing sites, you'll see that their fake site doesn't have valid security certificates at the address bar and you'll most likely get a full page warning in your browser before even making it to the site. Once you are on a site like amazon, you'll be encrypted the whole time with HTTPS. Though. You are right in the sense that a fake page could randomly pop up saying you need to reset your password or enter in sensitive info, and if you don't notice that you're at www.imstealingyourshit.com.... then you're screwed. Also, zero day hacks on windows. If someone is determined enough, they will get what they want.