Hector Martin

So, yeah. The wpa_supplicant bug only lets you *impersonate* an AP. It does *NOT* let you MITM it or passively decrypt. This is important.

If you're on a corporate network, an attacker *cannot* transparently MITM you. They can decrypt sent packets but they're *dropped*.

Picture: using corporate network, using web browser with usual configuration, on average sites

most sites don't use HSTS, so you can SSLStrip and MITM internet access easily

this implies the user is "trusting WAN", yes, but most people don't even know what that means

usually the expectation is that local WPA2 will protect against attacks on a local network, because attacking the uplink is harder

same applies to a home network (but not to a public network with a public PSK, since you could just impersonate the AP anyway)

and a lot of stuff on LAN _trusts the LAN_; sure, you can't transparently MITM those with wpa_supplicant, but you can impersonate