I really don't see the point in your comparison. I would have said that WEP is a tarp with no roof...

My point is, and it's especially applying to public accesses, that WEP is bringing close to nothing in terms of security. It does not bring confidentiality, nor between users, nor against eavesdropping. It does not bring valuable authentication and integrity check either.

To answer your first point, yes, encryption is not client's choice. But this article is also read by providers. And imho they should not stay on the idea that WEP may be good for anything. To me, it's far better to leave access wide open, as it won't leurre dummies about the network level protection.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/385/33126#33126