Weak Security

[millomite]

Since my ipad/iphone updated to iOs 14 I have a "weak Security" message underneath my WiFi router which is an EE Smart Hub. I need to change the encryption type to AES but there is no option on the Smart Hub to do that as far as I can see? Does anyone know how to do this or is the Smart Hub just out of date with its encryption type for security mode WAP2?

[millomite]

.

[nutsnut]

Is it the EE smart router or Smart hub you have?

I believe its possible to enable AES on the hub, but not the router. 

[millomite]

Well it says it’s a Smart Hub when I log into it but obviously it’s actually a router. If I can’t change to AES then will need to get my own. 

[XRaySpeX]

---

@nutsnut wrote:

I believe its possible to enable AES on the hub

---

Where? I see no mention of AES in the EE SH, altho', of course, it could be implementing AES w/out actually declaring it. We'll never know!

It was its predecessor, the BrightBoxes, that could set security as WPA2 (AES).

Both the EE Smart Hub & EE Smart Router are in fact modem/routers; just entitled differently by EE.

[millomite]

This is the conclusion I’ve come to. The Smart Hub does not have WEP2 AES and this means security for those using EE is weak. Not acceptable for a major broadband supplier. 

[millomite]

I will add to the statement above. I’ll look to use another supplier. 

[XRaySpeX]

Don't worry about it! Ignore it!

iOS14 is being unduly finicky about security. It is a false positive!

Routers all over the world have their tightest WiFi Security as WPA2. Hardly any yet support WPA3. Why should users kowtow to Apple's whims? Why should worldwide ISPs start updating or replacing their routers just on 1 manufacturer's false findings? They won't! Apple have no right to dictate the functionality of others' routers when these are already spec'ed to the current industry standard.

Even if you moved to another ISP you'd still be in the same boat.

[millomite]

The real issue here is that EE are using a router which may not have the highest security level in WPA. If it was WPA (AES) then I’m not worried. However, their router does not show what level it is using and that is annoying because my old one did. I have tried and failed to get EE to give me that information. Last week they rang me but the lady did not have the technical knowledge to provide me with an answer and said she would pass me onto their technical team. I am still waiting for an answer! Looks like I’ll be moving to another provider. 

[XRaySpeX]

---

@millomite wrote:

If it was WPA2 (AES) then I’m not worried.

Then don't be! It is that by definition.

Wi-Fi Protected Access 

WPA2, which requires testing and certification by the Wi-Fi Alliance, implements the mandatory elements of IEEE 802.11i. In particular, it includes mandatory support for CCMP, an AES-based encryption mode.

...

CCMP(CTR modewithCBC-MACProtocol)

The protocol used by WPA2, based on theAdvanced Encryption Standard (AES) cipher along with strongmessage authenticity and integrity checkingis significantly stronger in protection for both privacy and integrity than theRC4-based TKIP that is used by WPA.

Apple have really created a much-ado-about-nothing!