2 ms·
> So now there’s significant complexity to getting on the network Not really, every OS (even Network Manager does a good job) has support for the WPA enterpris
by Chlorus 7y ago
> So now there’s significant complexity to getting on the network
Not really, every OS (even Network Manager does a good job) has support for the WPA enterprise login flow. You basically get 1 prompt to trust a cert, then enter your username + pass (usually tied to AD) which you can save to your OS keychain. I've never had to fiddle with the one at my corporate network since first signing in months ago.
I don't know about the actual security benefits, but I do know it stops the typical "capture the handshake & game over"
> And how about when you’re having a meeting with outside people who need to get onto a network?
You set up a crappy rinky-dink "FooBarGuest" network with a PSK that has no real access to the rest of the network and pretty much can just be used for web browsing.