Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I've seen claims that the wifi 6E spec mandated that 6ghz networks required WPA3, so you would need to have a separate WPA2 ssid for legacy devices which therefore couldn't include 6ghz. A lot of access points now support a single SSID with all 3 bands using both WPA2 and WPA3, but I don't know if that is due to a change in the spec or if access points are violating the spec by offering that.
 help



Can’t one SSID support different WPA versions across APs? I’m pretty sure all my devices just shrugged and connected when I downgraded my (single AP) SSID from WPA3/2 to 2 only and back up to 3/2.

Which is a bit sad, but also seems like it would allow this use case perfectly (assuming this was done on purpose and not just an oversight).


> Can’t one SSID support different WPA versions across APs?

I think so, yes. My OG Nintendo Switch connects to the PSK SSID on my two OpenWRT Ones that's using what OpenWRT calls 'sae-mixed' encryption mode. My PCs (using ath9k and rtw88_8822be drivers) and my Pixel 5a connect just fine to my EAP SSID that's using the 'wpa3-mixed' encryption mode.

wpa_supplicant says that the PSK SSID has "SAE" in two out of three of its supported operating modes, and the EAP one has "EAP-SHA256-CCMP-preauth" in one of the two. [0] I assume that means that they support WPA3 operation, but I don't know for certain. I'm somewhat ignorant about WPA3, and am profoundly ignorant about WPA3-EAP.

[0] I'm assuming that the "/"-separated list that comes after the "WPA2-" bit in wpa_supplicant's scan results is a list of what I'm calling supported operating modes.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: