I've read several Wifi security related questions on here. There are two things related to the SSID which I don't fully understand.
Is there a best practice for SSID naming? I know that changing the SSID from the vendor default is recommended and that if two APs have the same SSID but different encryption/ passphrases, Wifi clients will still try to connect.
So, should SSID naming be more complex than say single words such as "wizardofoz" to something such as "wizardofoz_1d3h2"?
SSID hiding is not a security feature and I understand that hiding SSIDs for convenience such as when you have corporate private and public Wifis has its place.
What I'm not entirely clear on is what happens in the two states: hidden and unhidden.
In the hidden case, the AP does not broadcast the SSID, e.g. "wizardofoz". So instead the Wifi clients which have the SSID configured and saved, broadcast "hey where are you wizardofoz".
In the unhidden case, the AP broadcasts the SSID, and configured as well as unconfigured Wifi clients see that the SSID "wizardofoz" exists. In this instance the Wifi clients which have the SSID configured do not broadcast looking for the SSID.
Have I summarised the hidden/nohidden SSID cases correctly?
If so, in a scenario where a Wifi client (e.g. iPhone) is in a remote location from the known AP SSID ("wizardofoz") and we assume that the known SSID is hidden.
Is a rogue user more likely to create an AP with that SSID and try to get the handshake information compared to the unhidden case where the Wifi client would not broadcast the SSID it has saved.
Have I got that last bit right?
UPDATE: With respect to Lucas Kauffman's answer regarding my scenario above, by what criteria do you determine whether to hide the SSID?