News for hackers. Stuff that matters.

A comment on Microsoft says don't use PPTP and MS-CHAP. Parent comment

Re:Microsoft says don't use PPTP and MS-CHAP by zokier on Wednesday August 22, 2012 @01:30PM (#4418477)
It's only insecure if MS-CHAP is used for authentication, ie when used in WPA2-EAP mode. More commonly WPA2-PSK is used, which remains unaffected.
[ Parent | on HN ]
Re:Microsoft says don't use PPTP and MS-CHAP by ajross on Wednesday August 22, 2012 @03:03PM (#4418977)
In English this means that if you're using the standard "share a single password for the wifi network" mode that all consumers understand, you're fine. If you're in an enterprisey environment where you use your own wifi password that is the same as your login password elsewhere, you're in trouble.
[ Parent | on HN ]
Re:Microsoft says don't use PPTP and MS-CHAP by kbolino on Wednesday August 22, 2012 @04:38PM (#4419458)
You may be in trouble. There are other forms of EAP that do not use MS-CHAP, like EAP-TLS.
[ Parent | on HN ]
Re:Microsoft says don't use PPTP and MS-CHAP by helper on Wednesday August 22, 2012 @04:10PM (#4419302)
WPA-Enterprise networks that use MS-CHAPv2 are generally tunneling it inside of another secure channel (such as TLS with PEAP). In those cases you are not at risk to over the air snooping.
[ Parent | on HN ]