Although I like this idea, I worry about the attack vectors that might open up. If stealing session cookies doesn't even require a manual connection any more, t

Although I like this idea, I worry about the attack vectors that might open up. If stealing session cookies doesn't even require a manual connection any more, the reward rate for such an attack becomes much higher. That being said, I don't think those concerns are an indication that this technology is bad. It is an indication that security practices around free and open WiFi networks needs to be improved. It is likely that this technology will be available before we see any real improvements to that sort of security, so hopefully the system would be easy to configure/turn off and would use sensible defaults to ensure it minimises risk. EDIT: edited for clarity/grammar