Wi-Fi Security (WPA)
Wireless
Overview
WPA2/WPA3 protect link access and traffic with different authentication methods. Enterprise designs use individual credentials and EAP-based authentication, often certificate trust. WPA3-Personal uses SAE rather than the old PSK handshake model. A secure SSID still needs safe segmentation and endpoint controls.
Protocol stages
- 1Credential / certificate
- 2Authentication exchange
- 3Key agreement
- 4Encrypted data
Interactive exercise
Knowledge check
A corporate EAP client accepts any authentication-server certificate. What risk increases?
Educational model — not real hardware, traffic or official certification.