[Cerowrt-devel] Fwd: [Ow-tech] Open secure wireless

[Cerowrt-devel] Fwd: [Ow-tech] Open secure wireless

[Dave Taht]

In the alphabet soup of wireless standards, I had not heard of 802.11u
before now.

http://www.riosec.com/articles/open-secure-wireless-20


---------- Forwarded message ----------
From: Mitar <mmitar@gmail.com>
Date: Wed, Jun 17, 2015 at 4:29 AM
Subject: [Ow-tech] Open secure wireless
To: ow-tech@lists.eff.org


Hi!

Reading this old post:

https://www.eff.org/deeplinks/2011/04/open-wireless-movement

I wanted to point some research done on this some time ago:

http://www.riosec.com/articles/Open-Secure-Wireless
http://www.riosec.com/articles/Open-Secure-Wireless/Open-Secure-Wireless.pdf

And also some progress:

http://www.riosec.com/articles/open-secure-wireless-20

If you are not doing that already, I think EFF should get on board of
supporting those changes to the standard.

(BTW, originally, as presented in 1.0 paper, WiFi standard does allow
open and secure connections, just no operating system really
implements it because they all first prompt for the password, before
trying to connect to the encrypted WiFi network to figure out the
password is really required.)


Mitar

--
http://mitar.tnode.com/
https://twitter.com/mitar_m
_______________________________________________
Ow-tech mailing list
Ow-tech@lists.eff.org
https://lists.eff.org/mailman/listinfo/ow-tech


-- 
Dave Täht
What will it take to vastly improve wifi for everyone?
https://plus.google.com/u/0/explore/makewififast

Re: [Cerowrt-devel] [Ow-tech] Open secure wireless

[Ranganathan Krishnan]

We have Chris Byrd from Riosec on the ow-tech mailing list. Check
out this thread from him last year : 

https://lists.eff.org/pipermail/ow-tech/2014-May/000031.html

I have this feature enabled on the Openwireless APs. What is needed
is a campaign with the Client manufactureres (Google, Cyanogen, 
Apple etc) to get them to fix the bugs in their implementation that
cause their clients to abort if no client certificate is installed -- even
though the connection would succeed since the server will never
request the client cert. 

If there is interest in sustaining such a campaign with the Client 
manufacturers, I will be happy to contribute. 

Cheers,
Ranga




On Jun 17, 2015, at 8:47 AM, Dave Taht <dave.taht@gmail.com> wrote:

> In the alphabet soup of wireless standards, I had not heard of 802.11u
> before now.
> 
> http://www.riosec.com/articles/open-secure-wireless-20
> 
> 
> ---------- Forwarded message ----------
> From: Mitar <mmitar@gmail.com>
> Date: Wed, Jun 17, 2015 at 4:29 AM
> Subject: [Ow-tech] Open secure wireless
> To: ow-tech@lists.eff.org
> 
> 
> Hi!
> 
> Reading this old post:
> 
> https://www.eff.org/deeplinks/2011/04/open-wireless-movement
> 
> I wanted to point some research done on this some time ago:
> 
> http://www.riosec.com/articles/Open-Secure-Wireless
> http://www.riosec.com/articles/Open-Secure-Wireless/Open-Secure-Wireless.pdf
> 
> And also some progress:
> 
> http://www.riosec.com/articles/open-secure-wireless-20
> 
> If you are not doing that already, I think EFF should get on board of
> supporting those changes to the standard.
> 
> (BTW, originally, as presented in 1.0 paper, WiFi standard does allow
> open and secure connections, just no operating system really
> implements it because they all first prompt for the password, before
> trying to connect to the encrypted WiFi network to figure out the
> password is really required.)
> 
> 
> Mitar
> 
> --
> http://mitar.tnode.com/
> https://twitter.com/mitar_m
> _______________________________________________
> Ow-tech mailing list
> Ow-tech@lists.eff.org
> https://lists.eff.org/mailman/listinfo/ow-tech
> 
> 
> -- 
> Dave Täht
> What will it take to vastly improve wifi for everyone?
> https://plus.google.com/u/0/explore/makewififast
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel

Re: [Cerowrt-devel] [Ow-tech] Open secure wireless

[Christopher Byrd]

[-- Attachment #1: Type: text/plain, Size: 3026 bytes --]

Yep, I'm here. Thanks for reading my research! If there are any questions
about the technique, I'd be glad to answer them. While technically Open
Secure Wireless works, the user experience is not acceptable. The biggest
hurdle remains industry standards and client support.

Christopher

On Wed, Jun 17, 2015 at 5:31 PM, Ranganathan Krishnan <rk@selwastor.com>
wrote:

>
>
> We have Chris Byrd from Riosec on the ow-tech mailing list. Check
> out this thread from him last year :
>
> https://lists.eff.org/pipermail/ow-tech/2014-May/000031.html
>
> I have this feature enabled on the Openwireless APs. What is needed
> is a campaign with the Client manufactureres (Google, Cyanogen,
> Apple etc) to get them to fix the bugs in their implementation that
> cause their clients to abort if no client certificate is installed -- even
> though the connection would succeed since the server will never
> request the client cert.
>
> If there is interest in sustaining such a campaign with the Client
> manufacturers, I will be happy to contribute.
>
> Cheers,
> Ranga
>
>
>
>
> On Jun 17, 2015, at 8:47 AM, Dave Taht <dave.taht@gmail.com> wrote:
>
> > In the alphabet soup of wireless standards, I had not heard of 802.11u
> > before now.
> >
> > http://www.riosec.com/articles/open-secure-wireless-20
> >
> >
> > ---------- Forwarded message ----------
> > From: Mitar <mmitar@gmail.com>
> > Date: Wed, Jun 17, 2015 at 4:29 AM
> > Subject: [Ow-tech] Open secure wireless
> > To: ow-tech@lists.eff.org
> >
> >
> > Hi!
> >
> > Reading this old post:
> >
> > https://www.eff.org/deeplinks/2011/04/open-wireless-movement
> >
> > I wanted to point some research done on this some time ago:
> >
> > http://www.riosec.com/articles/Open-Secure-Wireless
> >
> http://www.riosec.com/articles/Open-Secure-Wireless/Open-Secure-Wireless.pdf
> >
> > And also some progress:
> >
> > http://www.riosec.com/articles/open-secure-wireless-20
> >
> > If you are not doing that already, I think EFF should get on board of
> > supporting those changes to the standard.
> >
> > (BTW, originally, as presented in 1.0 paper, WiFi standard does allow
> > open and secure connections, just no operating system really
> > implements it because they all first prompt for the password, before
> > trying to connect to the encrypted WiFi network to figure out the
> > password is really required.)
> >
> >
> > Mitar
> >
> > --
> > http://mitar.tnode.com/
> > https://twitter.com/mitar_m
> > _______________________________________________
> > Ow-tech mailing list
> > Ow-tech@lists.eff.org
> > https://lists.eff.org/mailman/listinfo/ow-tech
> >
> >
> > --
> > Dave Täht
> > What will it take to vastly improve wifi for everyone?
> > https://plus.google.com/u/0/explore/makewififast
> > _______________________________________________
> > Cerowrt-devel mailing list
> > Cerowrt-devel@lists.bufferbloat.net
> > https://lists.bufferbloat.net/listinfo/cerowrt-devel
>
>

[-- Attachment #2: Type: text/html, Size: 5117 bytes --]

Re: [Cerowrt-devel] [Ow-tech] Open secure wireless

[Mitar]

Hi!

So, what can we do to change this?


Mitar

On Thu, Jun 18, 2015 at 2:11 PM, Christopher Byrd <chris@riosec.com> wrote:
>
> Yep, I'm here. Thanks for reading my research! If there are any questions
> about the technique, I'd be glad to answer them. While technically Open
> Secure Wireless works, the user experience is not acceptable. The biggest
> hurdle remains industry standards and client support.
>
> Christopher
>
> On Wed, Jun 17, 2015 at 5:31 PM, Ranganathan Krishnan <rk@selwastor.com>
> wrote:
>>
>>
>>
>> We have Chris Byrd from Riosec on the ow-tech mailing list. Check
>> out this thread from him last year :
>>
>> https://lists.eff.org/pipermail/ow-tech/2014-May/000031.html
>>
>> I have this feature enabled on the Openwireless APs. What is needed
>> is a campaign with the Client manufactureres (Google, Cyanogen,
>> Apple etc) to get them to fix the bugs in their implementation that
>> cause their clients to abort if no client certificate is installed -- even
>> though the connection would succeed since the server will never
>> request the client cert.
>>
>> If there is interest in sustaining such a campaign with the Client
>> manufacturers, I will be happy to contribute.
>>
>> Cheers,
>> Ranga
>>
>>
>>
>>
>> On Jun 17, 2015, at 8:47 AM, Dave Taht <dave.taht@gmail.com> wrote:
>>
>> > In the alphabet soup of wireless standards, I had not heard of 802.11u
>> > before now.
>> >
>> > http://www.riosec.com/articles/open-secure-wireless-20
>> >
>> >
>> > ---------- Forwarded message ----------
>> > From: Mitar <mmitar@gmail.com>
>> > Date: Wed, Jun 17, 2015 at 4:29 AM
>> > Subject: [Ow-tech] Open secure wireless
>> > To: ow-tech@lists.eff.org
>> >
>> >
>> > Hi!
>> >
>> > Reading this old post:
>> >
>> > https://www.eff.org/deeplinks/2011/04/open-wireless-movement
>> >
>> > I wanted to point some research done on this some time ago:
>> >
>> > http://www.riosec.com/articles/Open-Secure-Wireless
>> >
>> > http://www.riosec.com/articles/Open-Secure-Wireless/Open-Secure-Wireless.pdf
>> >
>> > And also some progress:
>> >
>> > http://www.riosec.com/articles/open-secure-wireless-20
>> >
>> > If you are not doing that already, I think EFF should get on board of
>> > supporting those changes to the standard.
>> >
>> > (BTW, originally, as presented in 1.0 paper, WiFi standard does allow
>> > open and secure connections, just no operating system really
>> > implements it because they all first prompt for the password, before
>> > trying to connect to the encrypted WiFi network to figure out the
>> > password is really required.)
>> >
>> >
>> > Mitar
>> >
>> > --
>> > http://mitar.tnode.com/
>> > https://twitter.com/mitar_m
>> > _______________________________________________
>> > Ow-tech mailing list
>> > Ow-tech@lists.eff.org
>> > https://lists.eff.org/mailman/listinfo/ow-tech
>> >
>> >
>> > --
>> > Dave Täht
>> > What will it take to vastly improve wifi for everyone?
>> > https://plus.google.com/u/0/explore/makewififast
>> > _______________________________________________
>> > Cerowrt-devel mailing list
>> > Cerowrt-devel@lists.bufferbloat.net
>> > https://lists.bufferbloat.net/listinfo/cerowrt-devel
>>
>



-- 
http://mitar.tnode.com/
https://twitter.com/mitar_m