Collaborate Disseminate
Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate (CA, user, or otherwise)?
If so, what are the security implications?
The reason I ask is: I’m regularly connecting to a particular organization’s … Continue reading Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate?
I could use two wifi connections, both with WPA & WPA2 Enterprise security, automatic PEAP and MSCHAPv2, one of them with certificate, the other without; both require user/pwd and are on a university campus.
Would any on… Continue reading Online banking on wpa & wpa2 enterprise
When connecting to a new AP, the client device will pop a warning to ask if the certificate of the new AP should be trusted. If trusted, the warning doesn’t show anymore if the certificate is known to have been trusted before… Continue reading Which attributes of a WPA AP certificate are used by a client device in deciding if the certificate has been trusted before?
For WPA enterprise in the corporate world, is the RADIUS server connected to the Authenticator/Access Point wirelessly or ‘wiredly’ for most situations? If they are connected wirelessly, does this mean that it becomes somewha… Continue reading How feasible would it be to sniff traffic between an Authentication Server and a RADIUS server in a corporate setting?
Looking at the manual for tkiptun-ng,(http://www.aircrack-ng.org/doku.php?id=tkiptun-ng) The output saves the keystream in the example near the end of the program. Is this the same keystream used to encrypt all the data traff… Continue reading Is the keystream recovered by tkiptun-ng the same key used to encrypt all data frames between the client and the AP?
So it is fairly trivial to decrypt 802.11 for WPA-PSK as explained in this link https://wiki.wireshark.org/HowToDecrypt802.11. Is it then possible to decrypt the same way for WPA enterprise?(Assuming that you do know the full… Continue reading Is is possible to decrypt 802.11 for WPA enterprise?
Some sites say that the PTK is used for encrypting the data between the client and the WAP while others say that the PMK is used instead. Which one is true?
From what I understand, this can have very different security impli… Continue reading Which key is actually used for encrypting data traffic in WPA after the 4WHS?
I would like to suggest to the client which one EAP method and inner authentication to use.
I’m using hostapd to create the AP.
I’ve tried by removing some methods in the hostapd.eap_user but I simply managed to make those … Continue reading Force/Suggest the client to use one specific EAP method
Background
A friend of mine is the owner of a medium sized gym. He wants to provide WiFi to his customers and asked me to come up with a concept and eventually also deploy it. As a computer scientist I have a thorough unders… Continue reading How to provide user friendly WiFi access to gym members with WPA2 Enterprise?
Background
A friend of mine is the owner of a medium sized gym. He wants to provide WiFi to his customers and asked me to come up with a concept and eventually also deploy it. As a computer scientist I have a thorough unders… Continue reading How to provide user friendly WiFi access to gym members with WPA2 Enterprise?