WPA2 was kracked because it was based on a closed standard that you needed to pay to read

WPA2 is already open in the sense that it’s an open standard. Despite what Cory seems to imply, I don’t think “spending hundreds of dollars” to access the full documentation is really going to deter a researcher. Then again, WPA2 is well known and understood so I’m not sure I buy that nobody found this bug up until now just because the IEEE had a paywall.

Part of the reason Wi-Fi works is because of its ubiquity due to standardization and industry adoption.

You could certainly write your own super awesome alternative to WPA2 but how do you get anybody else to use it? Then, of course, you run into this:

What it comes down to is KRACK is a problem. It’s not an insurmountable problem despite all the FUD out there.

6 Likes