A municipal library wants an open guest SSID that still encrypts each patron’s unicast traffic without distributing a passphrase. Which exchange enables that opportunistic encryption?
Select an answer to reveal the explanation.
Short Explanation
Open Wi-Fi used to be postcard-in-the-clear. OWE is the polite upgrade: no password on the chalkboard, but each client still does a Diffie-Hellman-style dance so eavesdroppers don’t read your ebook checkout. Captive portals don’t magically encrypt 802.11 unicast.
Full Explanation
Opportunistic Wireless Encryption (OWE) uses a Diffie-Hellman–style exchange so open networks can encrypt unicast traffic without a shared passphrase. Captive portals authenticate or authorize at higher layers and do not replace L2 encryption AKM. WEP and posted WPA2 PSKs defeat the “no passphrase / still encrypt” goal.