3 ms·

Very common misconception, but it's still a problem. Any client with the network password can capture the initial key negotiation, and then decrypt the client'

Very common misconception, but it's still a problem. Any client with the network password can capture the initial key negotiation, and then decrypt the client's subsequent traffic. You can enter the network password in Wireshark: http://wiki.wireshark.org/HowToDecrypt802.11 http://wiki.wireshark.org/HowToDecrypt802.11 .

pmjordan 16y ago
If the shared key is known, it's also trivial to install a rogue access point with the same SSID and a transparent, tampering proxy without a realistic chance of anyone noticing.
eru 16y ago
Thanks.