<story><title>Wi-Fi Alliance Introduces Wi-Fi Certified WPA3 Security</title><url>https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-introduces-wi-fi-certified-wpa3-security</url></story><parent_chain></parent_chain><comment><author>amluto</author><text>I&amp;#x27;m not optimistic.  I believe that the underlying crypto protocol is this:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;ieeexplore.ieee.org&amp;#x2F;document&amp;#x2F;4622764&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;ieeexplore.ieee.org&amp;#x2F;document&amp;#x2F;4622764&amp;#x2F;&lt;/a&gt;&lt;p&gt;It&amp;#x27;s &amp;quot;secure authentication of equals&amp;quot;, which is a protocol that kind of looks like it&amp;#x27;s trying to be a PAKE (Password Authenticated Key Exchange), but the paper does not mention PAKE anywhere in its abstract, and I&amp;#x27;m not at all confident that SAE&amp;#x27;s design or analysis takes into account the properties that PAKE protocols should have.&lt;p&gt;I think that the original WPA key exchange was supposed to use the SRP protocol, which is a PAKE, but that was dropped due to patent issues.  Since then, as I understand it, quite a few very nice PAKE protocols have had their patents expire, so I don&amp;#x27;t see what the problem is now.&lt;p&gt;So color me extremely skeptical.</text></comment>
<story><title>Wi-Fi Alliance Introduces Wi-Fi Certified WPA3 Security</title><url>https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-introduces-wi-fi-certified-wpa3-security</url></story><parent_chain></parent_chain><comment><author>excalibur</author><text>&amp;gt; Wi-Fi Alliance is also introducing Wi-Fi CERTIFIED Easy Connect™, a new program that reduces the complexity of onboarding Wi-Fi devices with limited or no display interface – such as devices coming to market for Internet of Things (IoT) – while still maintaining high security standards. Wi-Fi Easy Connect™ enables users to securely add any device to a Wi-Fi network using another device with a more robust interface, such as a smartphone, by simply scanning a product quick response (QR) code. Wi-Fi Easy Connect and WPA3 represent the latest evolution in Wi-Fi Alliance programs to ensure users receive a positive experience while remaining securely connected as the security landscape evolves.&lt;p&gt;This is highly reminiscent of WPS. The language indicates that they&amp;#x27;ve learned their lesson and focused on making the standard secure, at least in theory. Time will tell how well it&amp;#x27;s implemented, but history says to be skeptical and disable it for the time being.</text></comment>