Which encryption to use?

I just got a different router and it supports a bunch of different security measures. I've been reading up on their pros/cons on wiki so I have a rough idea of the differences between the options. I just want something that provides some measure of safety but isn't too difficult to get working (or fix in the event that something resets when I'm not home, this is my parents house).

The options available for my router are:

WEP (which I guess you shouldn't really use anymore), 802.1x and RADIUS (this seems promising?), WPA-PSK, WPA, WPA2-PSK(AES), WPA2-AES, WPA-PSK/WPA2-PSK, WPA1/WPA2.

That's the list copied from the router's config page. Any suggestions?

I did some reading about this myself some time ago, and came to the conclusion that for a home network, WPA2-PSK (AES) should suffice, unless you have some rather old network devices. You should choose a strong passphrase to share.

I don't use any crypto on my home wireless network. Anything worth hiding is going over HTTPS already. And I want other people to be able to use my access point.

> And I want other people to be able to use my access point.
Ah yes, until the likes of RIAA come knocking for all the illegal music downloads traced to your IP address. But it'll be you who's facing the music, rather than listening to it.

Quote:

---

Originally Posted by Salem

> And I want other people to be able to use my access point.
Ah yes, until the likes of RIAA come knocking for all the illegal music downloads traced to your IP address. But it'll be you who's facing the music, rather than listening to it.

---

I'm not changing what I do just because of a roaming band of psychotics. If I take some huge fine because of an IP address showing up in a log somewhere (and nothing else, since I don't even listen to RIAA-made crap much less download it) then there will be another injustice in the world, I suppose.

Quote:

---

Originally Posted by brewbuck

I don't use any crypto on my home wireless network. Anything worth hiding is going over HTTPS already.

---

You're in good company.

Quote:

---

Originally Posted by brewbuck

And I want other people to be able to use my access point.

---

I don't, and like at least one other mere mortal, I do not quite buy Schneier's argument (which is similiar to yours).

Anyway, if you use any sort of encryption and therefore password on your wireless, you need to at least explain to your parents how to factory-reset the thing so that, if you go on extended hiatus and it borks itself, they can at least use their Internet until you get back.

Well they could not prove anything even if they wanted to, in the UK that is, as only commercial access points need to be encrypted by law. I doubt they would be able to seize you computer either.

Personally, I use WPA2 because WEP < WPA and 1 < 2. dont know much else about it really.

How about a different band of roaming psychotics?

Quote:

---

Originally Posted by Salem

How about a different band of roaming psychotics?

---

I don't see how a network of unsecured access points is less secure than the open Internet. On the 'net, anybody can get to your IP address anyway (of course there are firewalls, but you can set those up on a home network as well while still leaving WiFi open). If open WiFi was a vector for the spread of a virus, it's no more so than the Internet as a whole. The security has to be at the host level, no matter what protocol you're using.

WiFi encryption is only useful for hiding the data you are transmitting, since anybody can sniff it. It's not a substitute for strong host security.

Quote:

---

Originally Posted by laserlight

I did some reading about this myself some time ago, and came to the conclusion that for a home network, WPA2-PSK (AES) should suffice, unless you have some rather old network devices. You should choose a strong passphrase to share.

---

Okay cool, I'll probably go with that then. Thank you for the feedback.

Quote:

---

Originally Posted by mike_g

WEP < WPA

---

His logic is purely in terms of their ASCII values, too, ladies and gentleman.