Trying to deploy WPA3 on my home network
gist.github.com
Trying to deploy WPA3 on my home network
1–10 of 29 posts
Re: Trying to deploy WPA3 on my home network
#2Synology Routers support WPA3 by default
Re: Trying to deploy WPA3 on my home network
#3Worried enough about security to deploy WPA3, but still uses a Galaxy S2? Even with LineageOS, aren't you still using ancient device drivers?
Re: Trying to deploy WPA3 on my home network
#4Worried enough about security to deploy WPA3, but still uses a Galaxy S2? Even with LineageOS, aren't you still using ancient device drivers?
Device drivers don't usually need to be updated unless the driver interface changes (i.e. when you update the Linux kernel) or the driver needs to be updated to accommodate quirks of new software (i.e. graphics drivers and new video games).
They probably do want to be getting the latest security patches to the kernel and base OS.
Re: Trying to deploy WPA3 on my home network
#5Use WPA3-Enterprise (you can use Let's Encrypt to get a valid certificate so it works fine in a home environment).
Don't use SAE (which is, indeed, an instantiation of Dragonfly). I have a strong suspicion that the way it is used, there will be a practical attack.
Re: Trying to deploy WPA3 on my home network
#6Use WPA3-Enterprise (you can use Let's Encrypt to get a valid certificate so it works fine in a home environment). Don't use SAE (which is, indeed, an instantiation of Dragonfly). I have a strong suspicion that the way it is used, there will be a practical attack.
Or just use WPA2-Enterprise, afaik there are no pressing security needs to upgrade to WPA3 if you are using EAP, and it is widely supported out of the box
Re: Trying to deploy WPA3 on my home network
#7Use WPA3-Enterprise (you can use Let's Encrypt to get a valid certificate so it works fine in a home environment). Don't use SAE (which is, indeed, an instantiation of Dragonfly). I have a strong suspicion that the way it is used, there will be a practical attack.
Can you provide any more info on your concerns about SAE?
Re: Trying to deploy WPA3 on my home network
#8Worried enough about security to deploy WPA3, but still uses a Galaxy S2? Even with LineageOS, aren't you still using ancient device drivers?
Device drivers don't usually need to be updated unless the driver interface changes (i.e. when you update the Linux kernel) or the driver needs to be updated to accommodate quirks of new software (i.e. graphics drivers and new video games). They probably do want to be getting the latest security patches to the kernel and base OS.
I remember the creator of CopperheadOS claiming the "Nexus 5" (which is EOL) is not secure because of hardware (baseband?) vulnerabilities that wouldn't be trivial to fix.
Citation: https://twitter.com/DanielMicay/status/1058103333414522880
Re: Trying to deploy WPA3 on my home network
#9Synology Routers support WPA3 by default
They also support a mode where they will use WPA3 when supported and fall back to WPA2 when there isn't device support.
Re: Trying to deploy WPA3 on my home network
#10Use WPA3-Enterprise (you can use Let's Encrypt to get a valid certificate so it works fine in a home environment). Don't use SAE (which is, indeed, an instantiation of Dragonfly). I have a strong suspicion that the way it is used, there will be a practical attack.
Can you provide any more info on your concerns about SAE?
Here is some background reading: