I to find out a way to “verify a router's identity” for security purposes.
I was thinking in some process that involves hiding the router's SSID plus verifying the router's MAC address when performing the connection. The problem here is, the SSID, even when hidden, can be easily detected, as well as the MAC address, a password even with WPA2 security isn't completely helpful when non-techies are connected to that network because social engineering.
So this information would allow an attacker to spoof the router's identity, and maybe with a stronger WiFi signal this attacker would cause pre-configured computers to switch from the real network to the fake one, allowing the attacker to see all packages being transmitted inside and outside the network.
I want to know if there's an SSL-like scheme for verifying the identity of the router someone is connecting to, in order to avoid these kind of attacks.