OpenWireless
OpenWireless copied to clipboard
EFForg
Generate SSID and passphrase
As a user I want to generate the SSID and passphrase for my router So that they are random and unrelated to me
- Confirm this is ok from a security perspective?
- Clicking the button overwrites whatever is already in the fields i.e. Generates new text each time
We've decided to auto-generate private network passphrase, see security.txt and #163.
I hadn't considered generating the SSID, that's an interesting idea. I think it doesn't improve security much, but it does reduce the cognitive load of initial setup.
There were two thoughts behind generating an SSID:
- Reducing cognitive load, as you mention
- Facilitating creation of SSIDs that don't use PII, which we know happens sometimes today when users create their own network name (users sometimes include their name, street, apartment number, etc in an SSID without realizing the potential consequences).
On Thu, Jul 24, 2014 at 9:46 PM, jsha [email protected] wrote:
We've decided to auto-generate private network passphrase, see security.txt and #163 https://github.com/EFForg/OpenWireless/issues/163.
I hadn't considered generating the SSID, that's an interesting idea. I think it doesn't improve security much, but it does reduce the cognitive load of initial setup.
— Reply to this email directly or view it on GitHub https://github.com/EFForg/OpenWireless/issues/50#issuecomment-50068130.
People do want memorable SSID, generally. Providing instructions to user to not use PII in SSIDs should be enough. Generating pass phrase is separate issue. Close this item after adding PII avoidance to documenation/instructions.
