3 ms·

Yes: I still don't have an easy way to authenticate the network I'm joining. All I have is an SSID name but no public key or fingerprint thereof with which to

Yes: I still don't have an easy way to authenticate the network I'm joining. All I have is an SSID name but no public key or fingerprint thereof with which to authenticate the network. When I go to someone's home it'd be nice if they could post a QR code for their guest Wi-Fi network and all I'd have to do is scan it to join it. Plus a QR code could elide the need for a password.

lxgr 3y ago
> Yes: I still don't have an easy way to authenticate the network I'm joining. PSK authentication works both ways. If the network does not know your entered passphrase, your device won't connect to it. The same is true for some (but not all) WPA enterprise EAP authentication methods (EAP-PWD uses it, for example); others do use public key certificates (like anything based on EAP-TTLS/EAP-PEAP). In case of EAP-PEAP-MPSCHAPv2 you even get both.
- cryptonector 3y ago
  > PSK authentication works both ways. Yes, but the PSK is shared so... > others do use public key certificates What's needed is a mechanism for learning those. That's where the QR code thing comes in.
mschuster91 3y ago
> I still don't have an easy way to authenticate the network I'm joining. If you're using WPA-Enterprise, yes you can - you need to roll out your own SSL PKI though, and almost no consumer-grade APs support it. > When I go to someone's home it'd be nice if they could post a QR code for their guest Wi-Fi network and all I'd have to do is scan it to join it. Plus a QR code could elide the need for a password. That has been a thing for years [1], if you need a generator you can use [2]. [1] https://github.com/zxing/zxing/wiki/Barcode-Contents#wi-fi-network-config-android-ios-11 https://github.com/zxing/zxing/wiki/Barcode-Contents#wi-fi-n... [2] https://qifi.org/ https://qifi.org/
- cryptonector 3y ago
  Oh nice! TIL. THANK YOU.

lxgr 3y ago

> Yes: I still don't have an easy way to authenticate the network I'm joining. PSK authentication works both ways. If the network does not know your entered passphrase, your device won't connect to it. The same is true for some (but not all) WPA enterprise EAP authentication methods (EAP-PWD uses it, for example); others do use public key certificates (like anything based on EAP-TTLS/EAP-PEAP). In case of EAP-PEAP-MPSCHAPv2 you even get both.

cryptonector 3y ago
> PSK authentication works both ways. Yes, but the PSK is shared so... > others do use public key certificates What's needed is a mechanism for learning those. That's where the QR code thing comes in.

mschuster91 3y ago

> I still don't have an easy way to authenticate the network I'm joining. If you're using WPA-Enterprise, yes you can - you need to roll out your own SSL PKI though, and almost no consumer-grade APs support it. > When I go to someone's home it'd be nice if they could post a QR code for their guest Wi-Fi network and all I'd have to do is scan it to join it. Plus a QR code could elide the need for a password. That has been a thing for years [1], if you need a generator you can use [2]. [1] https://github.com/zxing/zxing/wiki/Barcode-Contents#wi-fi-network-config-android-ios-11 https://github.com/zxing/zxing/wiki/Barcode-Contents#wi-fi-n... [2] https://qifi.org/ https://qifi.org/

cryptonector 3y ago
Oh nice! TIL. THANK YOU.