6 ms·
Dumb captive portals, which do still exist in some places, usually do MitM attacks on the connection, so you need some http(no-s) site that you can abuse as "ye
by deathanatos 20d ago
Dumb captive portals, which do still exist in some places, usually do MitM attacks on the connection, so you need some http(no-s) site that you can abuse as "yeah, this can get attacked by the WiFi" to then answer the portal.
The right way is that there's DHCP option for the network to signal "I have a captive portal", that's been standardized for over a decade.
… or … IDK … just stop shoving ads down people's throats just because they want WiFi.
- jcgl 20d agoI’ve never even heard of the DHCP option for this. How widely adopted is it? It’s surprising to hear it called “the right way” when it wouldn’t work for a single-stack IPv6 (or IPv6-mostly, probably) network.
- deathanatos 19d agoDHCP works over IPv6, but there's also a corresponding RA option, too, if your v6-only network doesn't use DHCP. https://www.rfc-editor.org/info/rfc8910/ https://www.rfc-editor.org/info/rfc8910/ is, I think, the latest version of the standard.
- jcgl 18d agoAh great, thanks for the link! A very clearly-written RFC.