3 ms·
I'm unsure, but doesn't WPA2 password knowledge allows to decrypt your traffic? (Possibly with an active attack to re-initiate handshake?) I.e. someone who kno
by drdaeman 13y ago
I'm unsure, but doesn't WPA2 password knowledge allows to decrypt your traffic? (Possibly with an active attack to re-initiate handshake?)
I.e. someone who knows your password could drive by your home, listen to the air and see what you're doing online.
- PeterisP 13y agoMy internet traffic anyways is wide open and can be probably be tapped by giving a beer to a teenage techie in my local ISP ; or going to a router in our attic (last time i was there, it was behind a tiny padlock) where the wires split out to apartments. If I use https/ssh, then my traffic is safe even if wifi is open; if I don't, then my traffic is unsafe even if WPA2 is used.
- lightcatcher 13y agoThis isn't the case. The WPA2 handshake involves the computation of a session key for each client, so clients on the network can't read the plaintext of each other's traffic. The session key is established with a nonce generated by the access point as well as the MAC addresses of the access point and client.
- drdaeman 13y agoThanks for clarifications. What I had in mind was the following case: if you disrupt someone's connectivity (jam the channel for some time) and force them to reconnect, having listened to nonces and knowing pre-shared secret, you can calculate PMK (and GTK), or I'm wrong? (I haven't re-checked the specs, but believe 802.11 headers are unencrypted - only payload is - so MACs are not secret.)