Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F...
by franga2000 on Wednesday January 27, 2021 @01:46PM
(#25932134)
What Android does is slightly more complicated than that, but it's good to know Apple supports at least something standardized. The main advantage of DPP/EasyConnect (what Android uses with QR codes) is that the key isn't actually stored in the code. It creates a temporary key that allows both devices to communicate securely, then transfers the credentials securely over that connection.
[ Parent
| on HN ]
Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F...
by Thorrez on Thursday January 28, 2021 @01:14AM
(#25938825)
Distributing a public key through a QR code? That's something I did a number of years ago for a similar purpose: https://throwpass.com
Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F...
by tinus_hn on Friday January 29, 2021 @05:16AM
(#25955840)
And at the end of the story there’s still an unlimited amount of devices that possess the key. So what is the gain?
Re:OpenWifiPass – Open-Source Implementation of Apple's Wi-F...
by franga2000 on Friday January 29, 2021 @03:38PM
(#25962144)
The key is only useful to the first device that gets it. It's generated for each transaction and only valid once. The devices (let's say two phones) communicate directly and once that's done, the connection closes. To add another device, the phone weill generate a new key and a new QR code.