Shortly: I am working on a project in which several IoT devices are connected to a WPA2 password and MAC filtering protected hotspot. Can the communication in this network be leaked since I do not use TLS?
I do not want to use TLS since the resources of my IoT devices are really limited, and implementing TLS would occupy much of them. Therefore, I want to create a private WiFi network, with WPA2 password protection and MAC address filtering, so I can ensure that only devices that I allow are connected. The only question in my mind is, can the information sent over this network be stolen? Does password protection only stops foreign devices to join network or does it encyrpt the data as well?
PS: My private WiFi network has no internet connection, it's just Access Point+IoT devices.