undefined | Better HN

story

0 pointsgsich8y ago0 comments

Somewhat true. Setting up a Freeradius is not hard. Problem is that you need another device that is running 24/7.

0 comments

The RADIUS server can run on the router/AP without compromising practical security in most cases.

The bit that's less practical for consumer setup is more the cert distribution and setup of separate credentials for each user. (The RADIUS server could even be built into the router in a consumer product.)

gsichOP8y ago

That's not needed, trust on first connect.

gruez8y ago

and what do you do if the certificate mismatches? 99% chance the average person will click through the warning because they want internet now.

gsichOP8y ago

Correct. You can't solve every problem with technology.

j / k navigate · click thread line to collapse

0 comments

dogma11388y ago

The RADIUS server can run on the router/AP without compromising practical security in most cases.

azernik8y ago

gsichOP8y ago

That's not needed, trust on first connect.

gruez8y ago

and what do you do if the certificate mismatches? 99% chance the average person will click through the warning because they want internet now.

gsichOP8y ago

Correct. You can't solve every problem with technology.

j / k navigate · click thread line to collapse