The problem is that these wireless protocols were NEVER designed with security in mind. 802.11, regardless of the flaws in WEP, is painfully bad because the single-shared-secret model is hideous. 802.1x has only single sided authentication and still too many single-shared-secrets.

The rule is basically you can't trust wireless network hardware designers/specifiers to get crypto and security even REMOTELY correct.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/64/10800#10800