Fwd: wpa2 and firesheep

ripe/roma is the week after ietf/beijing.  this is a hint.

randy


Date: Thu, 28 Oct 2010 16:21:49 +0900
Message-ID: <m2zktyzss2.wl%randy at psg.com>
From: Randy Bush <randy at psg.com>
To: attendees <79attendees at ietf.org>
Subject: [79attendees] wpa2 and firesheep

as in maastricht, the beijing network will require authentication.  as
in maastricht, two flavors of authentication will be available, wpa2
enterprise mode and a web portal.

you reallly really really want to use the wpa2 enterprise mode if at all
possible.  the reason is simple

    http://codebutler.github.com/firesheep/tc12

and further, until the content providers clean this up, you really do
not want to use public wifi unless you vpn through it.

but, if you use wpa2 authentication in beijing, you will not be totally
vulnerable to this attack.

randy