News for hackers. Stuff that matters.

A comment on Predicting, Decrypting, and Abusing WPA2/802.11 Group Keys [pdf]. Parent comment

Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key... by gruez on Sunday October 15, 2017 @10:13PM (#15480436)
The only reason TLS works is because of CAs. What could be the CAs for APs?
[ Parent | on HN ]
Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key... by azernik on Sunday October 15, 2017 @10:44PM (#15480533)
WPA2 Enterprise use a central RADIUS server for authentication, with separate credentials for each user, and a (separately-distributed) certificate for the server.

It's just not practical for consumer and small-business setups.

[ Parent | on HN ]
Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key... by gsich on Monday October 16, 2017 @02:50AM (#15481341)
Somewhat true. Setting up a Freeradius is not hard. Problem is that you need another device that is running 24/7.
[ Parent | on HN ]
Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key... by dogma1138 on Monday October 16, 2017 @03:54AM (#15481554)
The RADIUS server can run on the router/AP without compromising practical security in most cases.
[ Parent | on HN ]
Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key... by azernik on Monday October 16, 2017 @03:37AM (#15481491)
The bit that's less practical for consumer setup is more the cert distribution and setup of separate credentials for each user. (The RADIUS server could even be built into the router in a consumer product.)
[ Parent | on HN ]
Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key... by gsich on Monday October 16, 2017 @12:12PM (#15484296)
That's not needed, trust on first connect.
[ Parent | on HN ]
Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key... by gruez on Monday October 16, 2017 @12:43PM (#15484585)
and what do you do if the certificate mismatches? 99% chance the average person will click through the warning because they want internet now.
[ Parent | on HN ]
Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key... by gsich on Monday October 16, 2017 @06:59PM (#15487348)
Correct. You can't solve every problem with technology.
[ Parent | on HN ]