802.1x/PEAP/EAP-TTLS is Worse Than No Wireless Security

[athan1234]

Hi

These days... I was thinking if there was any way to desencryp the user and password tunnel eap.

I was looking at this article. I would like to know your opinions.

https://depthsecurity.com/blog/when-802-1x-peap-eap-ttls-is-worse-than-no-wireless-security

[Flavio Miranda]

Hi

 This is an endless discusion. This article was written in 2010, 12 year ago. 

 Every day some guy trying to look  smarter comes with some kind of "end of the world" theory but the Live move on anyway. 

 What can we say? We all know that all system is vulnerable somehow. We saw recently the Log4j vulnerability. Who knows how long it was there and how many others even worst must already been discovered and the industry not even dream they exist. 

 The question is, does this guy who wrote this article let his Wi-Fi network open? I dont think so.

[thomas]

What problem are you trying to solve?

If you are worried about username+password cracking, use certificates.

That is the article's recommendation in the end.