On Fri, Nov 05, 2004 at 11:30:26AM -0500, Dan Williams wrote:On Fri, 2004-11-05 at 11:08 -0500, Charles R. Anderson wrote:On Fri, Nov 05, 2004 at 05:02:40PM +0100, Ziga Mahkovec wrote:As for the ipw2100 driver -- versions 0.57+ now actually default to OPEN. But NM overrides this so no harm done. It does make life harder if you're using ifup scripts with shared key authentication though. I had to patch ifup-wireless to force restricted mode.
Shared Key auth is worse than no authentication/encryption at all. Anyone with a clue will be using Open System. I don't think we should put too much effort into making Shared Key easy to use.
Charles,
Why is it so much worse?
By doing Shared Key Authentication, you are providing potential crackers with both the Plaintext and the Ciphertext for the same data. This makes is much much easier for a third party to basically figure out what the WEP key is.
[...]
That said, are there plans for fedora to support 802.11x? Plus different EAP variants, most importantly EAP-TLS?
There are open source packages out there... and it would be nice if Linux could do this off-the-box such as Windows has been doing for a long time now..
-- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
