New attack on WPA using PMKID

Re:New attack on WPA using PMKID by spockz on Saturday August 04, 2018 @05:34PM (#17688528)

How would one setup the certificates in a right way? I presume that needs MDM anyways to conveniently distribute the certificates?

[ Parent | on HN ]

Re:New attack on WPA using PMKID by angry_octet on Saturday August 04, 2018 @06:50PM (#17688812)

You can do it without MDM, just distribute via an https webpage. Most universities do this, because it is 90% byod or guest access (you can only be enrolled in one MDM).

[ Parent | on HN ]

Re:New attack on WPA using PMKID by spockz on Sunday August 05, 2018 @03:38AM (#17690216)

So guests coming to your home would need to first download certificates in order to be able to trust your network. But they would then need to trust that certificate not to be used to MITM their own EAP servers... This doesn’t sound very user friendly. Am I missing something?

[ Parent | on HN ]

Re:New attack on WPA using PMKID by angry_octet on Sunday August 05, 2018 @06:41AM (#17690650)

Certificates, not CAs.

[ Parent | on HN ]

Re:New attack on WPA using PMKID by spockz on Sunday August 05, 2018 @04:41PM (#17693421)

Right. Of course.

[ Parent | on HN ]