To clarify, you don't want to suffer an MITM attack; that's just the current standard way of finding the captive portal login page. I believe the Wi-Fi Alliance

To clarify, you don't want to suffer an MITM attack; that's just the current standard way of finding the captive portal login page. I believe the Wi-Fi Alliance is working on Hotspot 2.0 (Passpoint) to fix this problem: http://www.theruckusroom.net/2014/10/hotspots-get-hotter-with-release-2-of-hotspot-20.html http://www.theruckusroom.net/2014/10/hotspots-get-hotter-wit... Briefly, it looks like there's a secure (WPA2) hotspot for internet access and an associated open hotspot if you need to sign up for an account (with a published signup URL).