3 ms·
I think the deauthentication issue was fixed with 802.11w, which is required for vendors to implement to get their 802.11ac license[1]. It was introduced in 200
by prophesi 8y ago
I think the deauthentication issue was fixed with 802.11w, which is required for vendors to implement to get their 802.11ac license[1]. It was introduced in 2009, so you can be sure there are plenty of vulnerable consumer routers out in the wild.
Of course, WPA3 will also suffer this same issue of adoption.
[1] https://security.stackexchange.com/a/64440 https://security.stackexchange.com/a/64440
- zokier 8y agoGreat, I haven't been tracking the situation that closely. Additionally googling around I did also find that there are standards to replace the typical captive-portal wifi setup, namely "online sign-up" (OSU) and "additional steps required for access" (ASRA). While I don't know how well they do work in real life, they do demonstrate that the problem is manageable within the WPA2 framework. That being said, the whole landscape around wifi is ridiculously muddied and complex, so if WPA3 does tackle the issues more natively (which I somewhat doubt), then that would be very welcome.