17 Jan
2017
17 Jan
'17
8:22 a.m.
Hi,
Since I sometimes build larger private WiFi networks, I would like to know if LiMe is
useful (or can be made useful) for this purpose. So can I secure all wireless
communication by using wpa2-psk?
Kind regards,
Koen
--
This email was Virus checked by Novit. http://www.novit.be
17 Jan
17 Jan
4:49 p.m.
Never tried, but with good hardware to support encryption, I think this
is not a problem... We are going into nodogsplash style solution to
control Internet individual access, but keep local ressources free
availability (and own control)...
Tell us about your results?
Thx
qo-op
Le 17/01/2017 à 04:22, Koen Diels a écrit :
Hi,
Since I sometimes build larger private WiFi networks, I would like to
know if LiMe is useful (or can be made useful) for this purpose. So can
I secure all wireless communication by using wpa2-psk?
Kind regards,
Koen
--
This email was Virus checked by Novit. http://www.novit.be
_______________________________________________
lime-users mailing list
lime-users(a)lists.libremesh.org
https://lists.libremesh.org/mailman/listinfo/lime-users
20 Jan
20 Jan
4:01 p.m.
are the lime ad-hoc connections encrypted?
On Tue, Jan 17, 2017 at 2:49 PM, fred <support(a)qo-op.com> wrote:
Never tried, but with good hardware to support
encryption, I think this
is not a problem... We are going into nodogsplash style solution to
control Internet individual access, but keep local ressources free
availability (and own control)...
Tell us about your results?
Thx
qo-op
Le 17/01/2017 à 04:22, Koen Diels a écrit :
--
bruno(a)pobox.com ▀─█▄██▄▀▄
http://brunovianna.net ─█▄██▄▀█▀█▄
skype: randomico▀─█▄██▄▀█▀█▄▌██─█▌█▌
Hi,
Since I sometimes build larger private WiFi networks, I would like to
know if LiMe is useful (or can be made useful) for this purpose. So can
I secure all wireless communication by using wpa2-psk?
Kind regards,
Koen
--
This email was Virus checked by Novit. http://www.novit.be
_______________________________________________
lime-users mailing list
lime-users(a)lists.libremesh.org
https://lists.libremesh.org/mailman/listinfo/lime-users
_______________________________________________
lime-users mailing list
lime-users(a)lists.libremesh.org
https://lists.libremesh.org/mailman/listinfo/lime-users 
5:21 p.m.
2017-01-20 17:01 GMT+01:00 bruno vianna <bruno(a)pobox.com>om>:
are the lime ad-hoc connections encrypted?
I think that ad-hoc doesn't support encryption (but seems that 802.11s
does [1]).
In my opinion doing encryption at this level is a trouble, because if
the encryption key is not public => the network is not open to
participation (LibreMesh is made for "libre" networks); otherwise if
the key is public => the security is gone.
So the encryption has to be managed at an application layer (VPN, HTTPS...).
I suppose that BMX6 supports some encryption... Dunno really...
A closed-network profile for LibreMesh could be developed, it would
need the lime-proto-client package (partially implemented [2]) and
lime-proto-wpa. The mesh connections would be AP-Station (or 802.11s)
instead of adhoc.
The question from Koen was exactly if WPA was already automagic in
LibreMesh: not yet, an idea which will be proposed for GSoC is about
this.
@Koen: if adding encryption just to the AP interface is enough, should
be easy to manually modify the /etc/config/wireless file generated by
lime-config adding WPA encryption to AP interface.
[1] https://en.wikipedia.org/wiki/IEEE_802.11s#Peer_authentication_methods
[2] https://github.com/libremesh/lime-packages/issues/47
6:06 p.m.
IMHO it is legit to use encryption even in a free network. Not all links must be available
for new connectios but the net (as a whole) must be. So there might be zones or links of a
free network implementing p2p links or link layer encryption.
However under my point of view, as Ilario says the security should relay on the user layer
and not on the link layer. It will be, for sure, more secure to implement VPN security
than a shared WPA encryption key.
In any case WPA2 preshared key exist for ADHOC but as fas as I know it is not yet
considered stable.
In the other side, would be nice to test 802.11s as a link layer and its native encryption
with libremesh. Please let us know if you try it.
Last but not least, bmx7 implements security mechanisms for signing packets but not yet
p2p encryption for the uset data. As far as I know it will be implemented soon using
IPsec.
Cheers.
On 20 de gener de 2017 14:21:27 GMT-03:00, Ilario <iochesonome(a)gmail.com> wrote:
2017-01-20 17:01 GMT+01:00 bruno vianna
<bruno(a)pobox.com>om>:
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
are the lime ad-hoc connections encrypted?
I think that ad-hoc doesn't support encryption (but seems that 802.11s
does [1]).
In my opinion doing encryption at this level is a trouble, because if
the encryption key is not public => the network is not open to
participation (LibreMesh is made for "libre" networks); otherwise if
the key is public => the security is gone.
So the encryption has to be managed at an application layer (VPN,
HTTPS...).
I suppose that BMX6 supports some encryption... Dunno really...
A closed-network profile for LibreMesh could be developed, it would
need the lime-proto-client package (partially implemented [2]) and
lime-proto-wpa. The mesh connections would be AP-Station (or 802.11s)
instead of adhoc.
The question from Koen was exactly if WPA was already automagic in
LibreMesh: not yet, an idea which will be proposed for GSoC is about
this.
@Koen: if adding encryption just to the AP interface is enough, should
be easy to manually modify the /etc/config/wireless file generated by
lime-config adding WPA encryption to AP interface.
[1]
https://en.wikipedia.org/wiki/IEEE_802.11s#Peer_authentication_methods
[2] https://github.com/libremesh/lime-packages/issues/47
_______________________________________________
lime-users mailing list
lime-users(a)lists.libremesh.org
https://lists.libremesh.org/mailman/listinfo/lime-users
2656
days inactive
2659
days old
lime-users@lists.libremesh.org
5 comments
6 participants
participants (6)
-
bruno vianna -
fred -
Gio -
Ilario -
Koen Diels -
Pau