3 ms·
Having the same WPA2-PSK authentication secret does not allow spying over WiFi, unless you are willing to actively spoof the network.
by zaroth 7y ago
Having the same WPA2-PSK authentication secret does not allow spying over WiFi, unless you are willing to actively spoof the network.
- ustolemyname 7y agoYes it does. If you capture the authentication handshake, it's as straightforward as putting the passphrase into Wireshark.
- zaroth 7y agoI could have sworn there was a DH key negotiation? And I worked in WiFi for a decade, a decade ago... Sorry, obviously I have not had enough coffee yet today. Looks like this was only added in WPA3!
- geofft 7y agoI think you can also do it with WPA2-Enterprise, so a common trick is to set up enough infrastructure to let your users use EAP-TLS or something, and IIRC EAP sets up a per-client session key in the handshake. The public LinkNYC wifi network, for instance, has both an open network and an EAP-TTLS one that you can download a provisioning profile for.