3 ms·
You could at least have Trust On First Use and rely on clients save the domain name<->SSID association. It stops someone from implementing a MITM on the network
by tomatocracy 8y ago
You could at least have Trust On First Use and rely on clients save the domain name<->SSID association. It stops someone from implementing a MITM on the network later on and is a significant improvement in security.
Having said that, there's no need for a CA as such to make that work.
- jopsen 8y agoOr publish SSID <-> public key association to a certificate transparency log. Or something like it... Probably, SSIDs would need to be globally unique, or somehow couples with a GPS coordinate..