NYC Just Converted 10 Payphones into Free WiFi Hotspots
thenextweb.com
thenextweb.com
I said that tongue-in-cheek but that is the counter argument to free or municipal wifi projects.
I feel like there should be some sort of trusted certificates or other method to determine whether or not you can trust the access point and alert the user when they may be moving sensitive info over that network.
The problem is 99% of folks don't know how to setup a stunnel and the remaining 1% understand the performance implications of being paranoid all the time.
WPA Enterprise / WPA2 Enterprise with PEAP (and several other flavors) includes a server certificate as part of the authentication process that you can validate before supplying your credentials. While it's not perfect, you can run public wifi with WPA2 Enterprise and just set the login to guest and a blank password (and say that in the ESSID). That allows anyone to connect but still allows them to authenticate the hotspot and have a fair level of protection from session snooping or hijacking.
Realistically future versions of 802.11 should use some type of system like that for unprotected connections, but they don't seem very interested.
Compared to... I was contracting at AT&T Wireless for a few months. Worst enterprise IT I've experienced. Getting a desk phone to work was near impossible. No one could access their voicemail. No voicemail - email bridge. The in-house chat/voice conferencing didn't work (stutter, dropped connections, couldn't login). You'd lose wifi connection walking down the hall, requiring full reauthentication for everything (signin, VPN, db connections, etc).
Great idea.
In Germany (and other countries), if you as a private person do not secure your wi-fi, and someone else piggybacks on it to do something illegal (say, download pirated data) you are liable.
What is the situation in the states? If the legal situation is similar, does it make a difference if the open wi-fi is provided by a city rather than a private person? Obviously it wouldn't be piggybacking when the free wi-fi is intended to be used by others, I wonder if that makes a difference. Also, could ToS be used to avoid the liability issue for a city?
Also, in the EU, ISPs are required to store the connection data of all customers for six months. Would a city that provides free wi-fi be considered an ISP and thus have to store all connection data too?
Love to see cities that care about their users..er citizens.
Probably the same thing they're trying to achieve with free streets, trees, parks, and so on: making the city more livable for those that pay taxes there. (And trust me, we pay a lot of taxes.)