3 ms·
once you are inside the network, all bets are off anyways. Once I'm inside the network, I can ARP-spoof the gateway and get to all traffic anyways - no addition
by pilif 16y ago
once you are inside the network, all bets are off anyways. Once I'm inside the network, I can ARP-spoof the gateway and get to all traffic anyways - no additional decryption needed.
While this might be a nasty oversight in the spec, for all intents and purposes, it is IMHO irrelevant as there are way easier methods to get at the data of other users in the network.
- watty 16y agoARP-spoofing can be detected although I'm not sure how many networks actively do this. Being able to decrypt all internal packets passively is a big deal.
- dedward 16y agoIt's a big deal - but most places that concerned about security, the ones that worry heavily about arp-spoofing and detection probably don't allow wireless in the first place..... at least that's been my experience.
- azim 16y agoARP spoofing actually in practice not easy to do. Enterprise class switches can snoop DHCP traffic and prevent forged ARP packets.