[oclug] The Feds can own your WLAN too

Adrian Irving-Beer wisq-oclug at wisq.net
Thu Apr 7 22:52:27 EDT 2005


On Thu, Apr 07, 2005 at 10:00:49PM -0400, Adrian Irving-Beer wrote:

> Probably a better solution would be them generating a TLS key,
> sending a PGP-signed Certificate Signing Request (CSR), and having
> an automated system determine their "closeness".  If legitimate, it
> sends them back an X.509 cert, and they can EAP-TLS authenticate.

I forgot to mention -- this is using currently available technology.
As far as I know, the RADIUS ('Enterprise' WPA) protocol should
probably allow someone to come up with a PGP-signing authentication
method, but it needs coding.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://tux.oclug.on.ca/pipermail/oclug/attachments/20050407/d4d2f7f8/attachment.bin


More information about the OCLUG mailing list