Collaborate Disseminate
The Pairwise-Master-Key (PMK) is the foundation key of encrypted communication on nearly all WPA WiFi networks, including WPA2-Enterprise networks.
Typically, the PMK rekey interval for personal networks is around 2-3 hours.
But how often … Continue reading How often should a WPA2-Enterprise PMK be rekeyed in a high security, large corporate network? [closed]
I have a question in particular about WPA’s Enterprise versus Personal without discussing the specifics of WPA2/WPA3.
I’ve encountered quite a few situations where the Personal version of WPA2/WPA3 was used while WiFi access was provided t… Continue reading What is a logical threshold in terms of users or devices to migrate from WPA personal to WPA enterprise?
While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. I’m starting to add more and more IoT … Continue reading WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks
If you joined a network in the past and trusted its certificate while at it, and saved it on your iPhone/iPad.
Sometime later, if either:
It’s the same network but their previous certificate has expired and they’re now using a new one.
Or
… Continue reading Do iOS and iPadOS alert you if the certificate of the network you’re trying to join has changed [closed]
While reading up about WPA2-Enterprise, it states that it is more preferred over WPA2-Personal as it allows authentication via digital certificates which prevents over-the-air attacks.
However, I am unsure of the following implications abo… Continue reading WPA2 Enterprise Authentication Certificate Security
can someone please tell me under what circumstances can WPA be cracked? i’ll appreciate it.
Continue reading Under what circumstances can WPA be cracked?
I have this scenario:
I want to create a WiFi network for a hotel that the customers should pay to gain access to the internet.
I tried Captive portal, but captive portal is very vulnerable against MAC spoofing.
So I tried wpa2-enterpris… Continue reading How to protect against MAC spoofing in WiFi network?
I’m trying to understand EAP-TLS authentication, but I’m struggling to understand a few bits:
Before the supplicant sends any certificates to the server, it usually verifies the server’s identity.
After it does, how can it ensure that it… Continue reading How does the EAP-TLS handshake work, exactly?
Looking at the Wi-Fi alliance document we find basically three modes:
WPA3-Enterprise only Mode
WPA3-Enterprise transition Mode
WPA3-Enterprise 192-bit Mode
Inside another document provided by Aruba there is another definition:
WPA3-Ent… Continue reading WPA3-Enterprise Modes
Single Sign On in a company means that you have one set of credentials for all the services the company uses / provides to their employees.
Logically, these credentials might also be usable for Wifi.
Benefits for the employee: Only one … Continue reading How do enterprises deal with SSO and Google backing up WiFi credentials?