3 ms·
This is the classic excuse to not implement encryption: "but we need a web of trust and certificate authorities and central management of identities and a milli
by drzaiusapelord 15y ago
This is the classic excuse to not implement encryption: "but we need a web of trust and certificate authorities and central management of identities and a million complex things that'll never work right even if implemented."
Encryption without identity validation is a worthy goal in itself, especially when we're talking consumer grade stuff.
- wmf 15y agoMITM is so trivial on Wi-Fi that protecting against passive sniffing but not MITM just provides a false sense of security. Fortunately there is some progress in this area: http://www.usenix.org/events/sec11/tech/full_papers/Gollakota.pdf http://www.usenix.org/events/sec11/tech/full_papers/Gollakot...