> Wifi Skeleton Key responded in February, calling the rumors slander and stating that the company collaborated with Baidu on a number of security measures. oh

> Wifi Skeleton Key responded in February, calling the rumors slander and stating that the company collaborated with Baidu on a number of security measures. ohh, this baidu https://citizenlab.org/2015/04/chinas-great-cannon/ https://citizenlab.org/2015/04/chinas-great-cannon/ edit: > Users cannot actually view these credentials so as to protect user data. this is technically impossible; you need the creds on the device so you can pass authentication; that's the whole point of... any auth protocol. while you could in theory have a remote oracle that signs/encrypts packets without giving the device the key, I don't think WPA-PSK allows this without sending the entire packet. along those lines, if you can send off the packet to be encrypted for wifi, then you can just do the whole connection over that.