A rogue AP offers open authentication while the real municipal network is WPA2. Why might some clients still join the weaker lookalike?
Select an answer to reveal the explanation.
Short Explanation
Same SSID, open door, and a rushed human or a bad profile can still stroll in—even when the real network is WPA2. Matching names beat matching security in the messy real world. Standards do not prefer open over WPA2, and you do not need a finished crack to attract a join.
Full Explanation
SSID matching plus user confusion or device misconfiguration can drive associations to weaker open lookalikes despite a stronger legitimate BSS. Standards do not prefer open over WPA2; the mere existence of WPA2 nearby does not block all open joins; dictionary cracking is unrelated to why a client first associates to an open twin.