Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

I saw it mentioned in an answer here about firesheep, but I've never heard of it -- Should WPA2 be presumed insecure?

share|improve this question
In short, WPA2 is still fairly secure against external threats. Insiders though - people who have your network's SSID & PSK - can sniff the wireless traffic of others on your network. – Iszi Sep 14 '12 at 1:55

2 Answers

up vote 4 down vote accepted

WPA2-AES should be considered secure against "outsiders": people to whom you have not given the cryptographic key / passphrase.

WPA2-AES is not secure against "insiders". People who you have given the cryptographic key can access the network and may be able to eavesdrop on communications of other users. However, usually this is acceptable and beyond the scope of what we are expecting the network to do for us.

See also How do I protect myself against 'hole 196'? and this summary of hole196.

Also, make sure you read about the vulnerability in Wifi Protected Setup (WPS). Probably you'll want to disable WPS. See, e.g., this question for some citations where you can read more about the WPS vulnerability.

share|improve this answer
up vote 1 down vote

For all the info on Hole196, please visit: http://www.airtightnetworks.com/home/resources/knowledge-center/wpa2-hole196-vulnerability.html

share|improve this answer
Please post some actual, useful content into the answer instead of just giving a link to an external website. – Iszi Sep 14 '12 at 21:57
I thought that was pretty useful. – adlwalrus Sep 15 '12 at 2:26
Welcome to IT Security! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. – Scott Pack Sep 20 '12 at 16:49

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.