RE: WPA problem and eduroam

[Stefan Winter <stefan.winter@xxxxxxxxxx>]

Hi,

> So I think it is reasonable to say that our reaction needs to be
> proportionate to the limited impact.
> >
> Yes, it's fine in my opinion. I suggest adding it to the advisory. We
> need to be that the response is proportionate; we don't want
> Institutions to panic and pull their eduroam services! We don't need
> perfect security, it only needs to be Good Enough.

Yes, the advisory definitely needs proper word-smithing. It emerged  
ad-hoc during a TF-EMC2 presentation and needs to be more elaborate  
etc. The "calming" explanations will definitely be in there in the  
final version, and very close to the beginning. It will also contain  
the 5-min re-key interval advice for TKIP networks.

I'll keep working on it in the coming days.

Greetings,

Stefan