Thanks to both Eric and Dean for their responses! -----Original Message----- From: Dean Cunningham [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 13, 2004 3:25 PM To: Exchange Discussions Subject: Re: OT: Wireless Security...
see http://www.netgear.com/pdf_docs/WLAN_Security_Concepts.pdf "The IEEE specification 802.11i, also known as the Robust Security Network (RSN), is the next standardized approach for stronger encryption and privacy. It will combine improved encryption with authentication. Two encryption methods replace the discredited WEP protocol: TKIP and AES. TKIP is an interim method. that will support legacy clients and access points through software updates. The other scheme, based on AES, will ultimately offer stronger security." >>> [EMAIL PROTECTED] 14/04/2004 4:13:33 a.m. >>> I have a question. This article (http://www.infoworld.com/article/02/02/14/020214hnwifispec_1.html) contains the following excerpt: The real problem is the fundamental way in which Wi-Fi works, according to Arbaugh. Although rapid rekeying of WEP keys, for example, which will be implemented in the next security standard called TKIP [Temporal Key Integrity Protocol], makes it more difficult to crack, Arbaugh said the entire design is just not good security. (What I'm using right now) But Arbaugh says TKIP does not eliminate the fundamental flaw in Wi-Fi security. "If anybody breaks TKIP, they not only break the confidentiality but they also break the access control and authentication so one break breaks everything. That is not good design. Each security mechanism should stand on its own," he said. Longer term, the IEEE Standards body intends to adopt AES [Advanced Encryption Standard], the same security protocol sponsored by the National Institute of Standards. (I also have the ability to use this method). What's weird, is that the information available with the Linksys router indicates that TKIP is more secure than AES...this article would indicate the other way around. So which one is truly more secure? _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. ********************************************************************** Northland State of the Environment Report 2002 now online at www.nrc.govt.nz ********************************************************************** NORTHLAND REGIONAL COUNCIL This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify [EMAIL PROTECTED] ********************************************************************** _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
