How would you know whether a VPN or similar is running MITM schemes to steal your password?

With TOR exit nodes, you are completely exposed if you use HTTP and potentially exposed if you use HTTPS, if the exit node is running MITM schemes of the type where you do not get any warning on your browser, whereby authorities are used for certification.

Does the same problem exist with VPN exit nodes? If yes, is there a way to detect it? Is there one provider that is considered more trustworthy and reasonably priced?

 

Mullvad VPN (the one I use), IVPN.

 

+1

 

Thanks. Any information in support of your assessment?

 

You can check out this site which includes good comparisons: https://thatoneprivacysite.net/