Linked by Thom Holwerda on Wed 30th Apr 2008 22:24 UTC
Thread beginning with comment 312346
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
VPN with some sort of strong software encryption such as Blowfish, AES, is preferred in the OpenBSD circles to secure any kinds of network connections, including WiFi... which usually secures the IP packets at layer 3... which means, you can effectively transmit data securely over an unsecure WiFi data link (layer 2)... therefore, it was not a priority for OpenBSD dev to secure layer 2 such as WPA.
Last time Theo written about WPA in misc was that WPA has become an accessibility problem rather than security. People use OpenBSD on their laptop would like to be able to access a WPA AP at a coffee shop.
VPN with some sort of strong software encryption such as Blowfish, AES, is preferred in the OpenBSD circles to secure any kinds of network connections, including WiFi... which usually secures the IP packets at layer 3... which means, you can effectively transmit data securely over an unsecure WiFi data link (layer 2)... therefore, it was not a priority for OpenBSD dev to secure layer 2 such as WPA.
It was not a priority because the people working on the net80211 layer were not using Wifi in the real world so they didn't care. This has since changed. Recommending the use of IPsec was only a workaround for your own network and it is not realistic to recommend the use of IPsec for everyone trying to connect to your AP anyway.
Last time Theo written about WPA in misc was that WPA has become an accessibility problem rather than security. People use OpenBSD on their laptop would like to be able to access a WPA AP at a coffee shop.
I cannot find any such comment from Theo and if he did it would have been about WPA and not WPA2. Anyway, this goes way beyond just coffee shops. WPA is in use everywhere.







Member since:
2005-07-06
I have tested it on my Thinkpad x40 and it works great. WPA is one thing I really wanted OpenBSD to have and now it's here.
Its terrible that it has taken this long; for something that is meant to be security orientated operating system, WPA seems very low on their priorities.