Re: WPA problem and eduroam

[Tomasz Wolniewicz <twoln@xxxxxx>]

Josh Howlett pisze:
>> 1. The fact, that in our opinion the problem is not serious 
>> will not be shared by some more paranoid local admins - they 
>> always exist somewhere and they will want to do something FAST.
>>     
>
> IMO, we shouldn't let the service be driven by paranoia of admins.
>
> I think it would be a good idea someone to perform a thorough analysis
> of the issue and what it means in the particular context of eduroam.
>   
Agreed, but whether WPA is or is not a big problem or not, multiple
ciphers are and will be. I think that the WPA problem is a unique
occasion to fix it, this is why I suggest it.
The TKIP stuff is more of an excuse.
Of course it would be a lot better to fix the supplicants, but I would
not be too sure that we will succeed, especially as thre will be more
and more of exotic WiFi devides.

Tomasz

-- 
Tomasz Wolniewicz    
          twoln@xxxxxx        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576