Re: EAP-TTLS/PAP & dynamic WEP

[Dan Williams <dcbw redhat com>]

On Thu, 2006-10-26 at 19:51 +0200, Stefan Schmidt wrote:
> Hello.
> 
> On Thu, 2006-10-26 at 11:00, Dan Williams wrote:
> > > 
> > > This may really be a problem for the UI. If there is no way to figure
> > > out if the WLAN is using 802.1X and 802.1X and WEP appear to be the same
> > > for the software, we would have to extend the WEP connection dialog that
> > > pops up when connecting to an unknown WEP network to also provide the
> > > possibility to select "WPA Enterprise" and "WPA2 Enterprise".
> > > This reduces the user-friendliness and makes it even less possible to
> > > configure a wireless network without any knowledge. It's very
> > > unfortunate that the standards do not provide enough information to be
> > > user-friendly.
> > 
> > WEP is entirely broken in this regard.  You cannot figure out
> > Open/Shared Key auth either from the beacon, the user has to know this.
> > You also cannot know the format of the Passphrase->Key hashing with WEP,
> > because there are 40 and 104-bit variants of each of the following: hex,
> > ascii, passphrase.
> 
> OK, so I remembered this correctly.
> 
> > In short, we need a way to do phase2 and make stuff like dynamic WEP
> > more apparent, but we need to do it in a way that doesn't break existing
> > stuff and that's at least mildly usable.
> 
> ACK. I hope I can start to look at it in the next week.

Great!  Let me know if you need any direction or help on stuff.

Dan

> regards
> Stefan Schmidt