New answers tagged

1

EAP-TLS derives the link keys from the TLS master secret, in practically the same way as TLS itself would derive the encryption keys. Because the master secret is different for every TLS handshake, the link keys will be different for every EAP authentication as well. The user certificate, as far as I can tell, is completely irrelevant. The same applies to ...


1

Since you don't care about authentication, why not use OWE (opportunistic wireless encryption) instead of WPA2? If your hardware supports it, it provides an open network that encrypts each client's traffic. There would be no need to mess with certificates.


Top 50 recent answers are included