On Sun, 10 Apr 2005 23:15:34 +0100, "Martin Underwood"
wrote:

- don't broadcast SSID

A waste of time.

- only allow connections from PCs with specific MAC addresses (listed)

Not only a waste of time but superfluous.

MAC filtering is implicit in the way CCMP utilises both client and server
MACs for key exchange.

- WPA (or at the very least 128-bit WEP) security

WEP is a waste of time. 104 bit has been publicly broken in 3 minutes using
the latest tools.


WPA with at least a 30 character PSK at the very minimum.


greg

--
Delenda est Carthago