2 ms·
You can have per-device stream encryption with WPA2, just use 802.1x. If you accept any user/password you'll have a public wlan where people can't eavesdrop.
by gsich 9y ago
You can have per-device stream encryption with WPA2, just use 802.1x. If you accept any user/password you'll have a public wlan where people can't eavesdrop.
- sohkamyung 9y agoWPA-PSK already does this (per-device stream encryption). The per-stream encryption is specified during the four way handshake via the ANonce and SNonce values [1]. However, this is only true if the handshake is not intercepted or snooped on by a third party. If it is, then the attacker knows enough to decrypt your data. 802.1x provides extra protection by ensuring the initial PSK is not know to the attacker, making the initial snoop of the handshake ineffective. [1] https://en.wikipedia.org/wiki/IEEE_802.11i https://en.wikipedia.org/wiki/IEEE_802.11i