Collaborate Disseminate
Is it possible to prevent SAE-PK-respecting WiFi clients from connecting to a real AP that doesn’t use SAE-PK by planting an AP that broadcasts the "SAE-PK Passwords Used Exclusively" bit with the same SSID? Potential clients mig… Continue reading Can an evil AP prevent real connections by claiming SAE-PK is needed?
This discussion of WPA3 OWE seems to imply that WiFi at Starbucks/the airport/whatever can be secured against an evil twin attack if they use WPA3-Personal instead of OWE. But it seems like that wouldn’t actually do anything.
If I’m at som… Continue reading How does a password prevent an evil twin if the password is publicly known?
I heard wpa3 is more secure with mfp.
I have a WPA AP using hostapd.
On /etc/hostapd.conf I have set it "forced"
ieee80211w=2
I see also this option about mfp
sae_require_mfp=1
Is sae_require_mfp useless with ieee80211w=2 or is… Continue reading sae_require_mfp=1 on hostapd and wpa3
I have a question in particular about WPA’s Enterprise versus Personal without discussing the specifics of WPA2/WPA3.
I’ve encountered quite a few situations where the Personal version of WPA2/WPA3 was used while WiFi access was provided t… Continue reading What is a logical threshold in terms of users or devices to migrate from WPA personal to WPA enterprise?
Perhaps an unconventional comparison. If we ignore device compatibility for a moment and compare security features of WPA3(-three)-Personal with WPA2(-two)-Enterprise. Which is most secure and why is it? Not just in terms of encryption str… Continue reading Is WPA2-Enterprise a more secure protocol designed to protect WiFi communication compared to WPA3-Personal?
Related: Are WPA2 connections with a shared key secure?
Is a public WPA3 network secure against eavesdropper who knows the password?
The specific use case would be a public WiFi using WPA3, but with a common password posted for everyone (i… Continue reading Are WPA3 connections with a shared key secure?
Converting my Secure Wi-Fi Design course to a hands-on lab experience was no small feat. I’m grateful for the opportunity and invite you behind the scenes at my WLPC Deep Dive. Continue reading Behind the Scenes – Teaching “Secure Wi-Fi Design Special Edition” at WLPC Phoenix
At the WLPC Conference in Phoenix a few weeks ago, I gave a short 30-minute talk on how and why to upgrade to WPA3 Security for business networks. Click the image in the blog header to watch the video. In this (accidentally) slide-free session, I cover… Continue reading How and Why to Upgrade to the Latest Wi-Fi Security [Video]
Will using a Wpa3 router with VPN tethering function to share a 3g modem network protect someone from the vulnerabilities in a 3g network?
I know there are 4g and 5g, I just want to know how much is possible to build securely on an insecur… Continue reading Assuming 3g network is vulnerable, will it be also vulnerable if I tether it using a VPN router? [closed]
I want to use WPA3 alone, but it seems that a lot of devices I have only support WPA2, so I have to enable WPA2 in one way or another. Currently, I have created two Wi-Fi networks on the same router: one for WPA3-SAE and one for WPA2-PSK w… Continue reading Is WPA3 mixed mode less secure than pure WPA3?