This is about securing WiFi APs which are usually connected to broadband like DSL and Fibre. Some of them are at business site and some are at home.
To protect against Evil Twin attack (basically spoofing AP, stealing password and then breaking into LAN etc) there's seems to be a way - to introduce WPA2 Enterprise with EAP-TLS.
Now the thing is that some enterprise users do not have private clouds nor resources or space to put a small server or VM Instance to serve as RADIUS server (even they have, it is very often difficult).
So I am wondering if solution with RADIUS server on the public internet in Cloud would be something reasonable to implement?
Going by this path I found one online service serving this purpose, I think it's suitable for the home users and small businesses - see IronWifi
I believe this way the WiFi network can be then commissioned as safe to use. Is that correct? Would be there any sort of attack (with EAP-TLS) which can be deployed to circumvent this security in reasonable easy way? Like using standard hacking software / hardware?
All routers have been already setup to 11n mode by the way and 20MHz bandwidth. This is to make it more secure by using newer standards but because it is using 40MHz by default I have made it 20MHz so that I could zone them better.