Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
How can I ensure that I connect to the right wireless Access Point?

Is it true, that WLAN routers aren't authenticated by clients? The only "authentication" is SSID and field strength?

share|improve this question

marked as duplicate by nealmcb, Iszi, Scott Pack, AviD Jun 12 '11 at 0:54

This question was marked as an exact duplicate of an existing question.

Just found an interesting link:… It's only secure as long as the PSK isn't known. If it is known like in many hotels, there's no router authentication. – chris Jun 11 '11 at 21:14

The SSID is more about identification of the network, not authentication.

Wireless authentication is done usually in either of these 3 ways:

  • Open System authentication: no authentication done

  • Shared Key authentication: Done with cryptographic handshakes between client and AP based on some shared secret - of course trust is on the assumption that the key is shared only between these two parties. In WPA/WPA2 there is mutual authentication, in WEP only client authentication is done.

  • EAP authentication: Using a radius server, different ways it can be done, can be based on certificates etc, no need for one shared secret for everyone. Mutual authentication is usually done.

share|improve this answer
Is this authentication used by common clients and SOHO Routers? I've never seen a certificate or key. Is it automatically saved after first login? – chris Jun 11 '11 at 21:05
If wpa/wpa2 is used then there is going to be a key or certificate of some sort. Are you talking about open wifi networks that don't use such mechanisms? – john Jun 11 '11 at 21:11
Yes or if the attacker got the PSK. Added a link to my question above. Quite interesting... – chris Jun 11 '11 at 21:15
Edited the answer to cover more possibilities. – john Jun 11 '11 at 21:26

Not the answer you're looking for? Browse other questions tagged or ask your own question.