Hacker News new | ask | show | jobs
by craftkiller 14 days ago
I've seen claims that the wifi 6E spec mandated that 6ghz networks required WPA3, so you would need to have a separate WPA2 ssid for legacy devices which therefore couldn't include 6ghz. A lot of access points now support a single SSID with all 3 bands using both WPA2 and WPA3, but I don't know if that is due to a change in the spec or if access points are violating the spec by offering that.
1 comments
lxgr 14 days ago
Can’t one SSID support different WPA versions across APs? I’m pretty sure all my devices just shrugged and connected when I downgraded my (single AP) SSID from WPA3/2 to 2 only and back up to 3/2.

Which is a bit sad, but also seems like it would allow this use case perfectly (assuming this was done on purpose and not just an oversight).

link
simoncion 14 days ago
> Can’t one SSID support different WPA versions across APs?

I think so, yes. My OG Nintendo Switch connects to the PSK SSID on my two OpenWRT Ones that's using what OpenWRT calls 'sae-mixed' encryption mode. My PCs (using ath9k and rtw88_8822be drivers) and my Pixel 5a connect just fine to my EAP SSID that's using the 'wpa3-mixed' encryption mode.

wpa_supplicant says that the PSK SSID has "SAE" in two out of three of its supported operating modes, and the EAP one has "EAP-SHA256-CCMP-preauth" in one of the two. [0] I assume that means that they support WPA3 operation, but I don't know for certain. I'm somewhat ignorant about WPA3, and am profoundly ignorant about WPA3-EAP.

[0] I'm assuming that the "/"-separated list that comes after the "WPA2-" bit in wpa_supplicant's scan results is a list of what I'm calling supported operating modes.

link