Lucy Yong
2016-12-09 17:17:05 UTC
Reviewer: Lucy Yong
Review result: Ready with Nits
The draft is nearly ready for the publication.
Minor comment: Suggest adding this in security considerations: OWE
provides encryption over the wireless medium, i.e., Wi-Fi without
authentication. Thus it does not provide security for end-to-end
traffic. users should still use application level security such as
VPN for end-to-end security. In this case, use of OWE prevents VPN
authentication info. to be spoofed in open public Wi-Fi.
one question: Will a user notices if OWE is used or not? This may be
important for some users.
nit: r/encryption of the wireless medium/encryption over the wireless
medium/
Review result: Ready with Nits
The draft is nearly ready for the publication.
Minor comment: Suggest adding this in security considerations: OWE
provides encryption over the wireless medium, i.e., Wi-Fi without
authentication. Thus it does not provide security for end-to-end
traffic. users should still use application level security such as
VPN for end-to-end security. In this case, use of OWE prevents VPN
authentication info. to be spoofed in open public Wi-Fi.
one question: Will a user notices if OWE is used or not? This may be
important for some users.
nit: r/encryption of the wireless medium/encryption over the wireless
medium/