| | 6 | |
| | 7 | '''How to make my mesh network secure ?''' |
| | 8 | |
| | 9 | What kind of security do you need? Security is a big field. Maybe you just |
| | 10 | mean encryption and authentication..... |
| | 11 | |
| | 12 | When you only want to make the whole wlan stuff unreadable for the outside, |
| | 13 | you could just use WPA_NONE. But this doesn't resolve the problem that the key |
| | 14 | could leak and make the mesh attackable - but that is something which could |
| | 15 | always happen. So it is probably not a solution for wifi community projects, but for |
| | 16 | mesh networks controlled by a company. |
| | 17 | |
| | 18 | There are other ideas for traffic over batman-adv. Just forget about |
| | 19 | encrypting your data on the wifi layer, but instead do everything some layers above. |
| | 20 | Some people experimented with the idea of implementing the needed authentication and |
| | 21 | encryption over IPsec. |
| | 22 | |
| | 23 | And most of the encryption and authentication stuff has to be resolved by the |
| | 24 | user and not by the network provider. This means https for sensible data |
| | 25 | instead of http, ssh instead of telnet, pop3s instead of pop3 and so on. |
| | 26 | |
| | 27 | So it really depends what you want and cannot be resolved in a "security for |
| | 28 | everything, against any attack and for every purpose" blob. |
