Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key...
by tonyztan on Sunday October 15, 2017 @11:42PM
(#15480688)
I'm thinking of a mechanism where the router obtains a trusted cert automatically, like Plex does (https://blog.filippo.io/how-plex-is-doing-https-for-all-its-...), and then asks users to authenticate by password over TLS before allowing access to network resources.
[ Parent
| on HN ]
Re:Predicting, Decrypting, and Abusing WPA2/802.11 Group Key...
by gruez on Sunday October 15, 2017 @11:53PM
(#15480718)
that only works because there's a central registar of plex users. im not sure how this can be done ad-hoc for APs. anyone can choose any ssid, so you'll need a global registar of ssids. The system will inevitably need to charge for registrations, otherwise bad actors would squat short and memorable ssids. a preshared key is much more feasible.