Cleared the chain of nested replies, but more on this subject: I would definitely be in favor of an encrypted semi-open wireless standard. Something kind of like PPSK but not in all ways. As was stated before, such a standard would ideally have a certificate purchased from a trusted CA that 99% of clients will respect. Then simply have the AP and client do an old-school Diffie-Hellman key exchange to encrypt all subsequent traffic. And you’re done! I understand that, while this looks good on paper, actually getting manufacturers to support it may be as hard or harder than getting them to support presently-available and widely proven WPA2-Enterprise w/ 802.1X.
-Matt Matthew Hinson CWAP
