4 ms·
Most portals I use intercept your request to a HTTP site and redirect you to their logic form which is served over HTTPS.
by fyfy18 9y ago
Most portals I use intercept your request to a HTTP site and redirect you to their logic form which is served over HTTPS.
- icebraining 9y agoYes, but after authentication, all traffic can be sniffed - including unencrypted connections.
- ori_b 9y agoHow is this different from the case without a captive portal, again?
- icebraining 9y agoUsing WPA-Enterprise, each connection is encrypted separately, eliminating that hole.
- ori_b 9y agoUsing WPA-Enterprise, as I understand it, requires devices to be preconfigured to authenticate with the radius server, which makes it a non-starter for the kinds of networks that use a captive portal.
- icebraining 9y agoNo, there's no preconfiguration needed, it's just a username/password account. You choose the network, then the OS asks you for your user/pass, then you're connected. It's the router that connects to the RADIUS server, not the device directly. And some routers have one embedded, so you don't even need to configure that, it "just works".
- tinus_hn 9y agoNow you don’t have to trust the other customers, only the bar you’re at, their ISP and a million other parties between you and the site you’re visiting.
- icebraining 9y agoThat's a reasonable point, but I'm speaking from the perspective of the bar owner - I feel I have a duty to provide better security even if the patrons have no reason to trust me.
- tinus_hn 9y agoLike a bar is going to run account administration.. at most they’re going to set a proper password with WPA2-PSK which provides protection against outsiders. But it can’t provide protection against an active attacker that has the password.
- icebraining 9y agoThey're probably also not putting up a captive portal, so what's your point?
- fulafel 9y agoYou could have a wifi access product that used a voucher system. The code could be on the bar receipt.