Comment 3 for bug 14392

Revision history for this message
Martin Pitt (pitti) wrote : Re: WEP key stored in world-readable /etc/network/interfaces

(In reply to comment #1)
> Considering that WEP is essentially flawed anyway, and that a user logged into
> the system can generally access the network (and mount a cleartext attack too),
> this doesn't seem like cause for concern. Martin?

I basically agree. We shouldn't break Hoary that close to the release with doing
such changes. However, I like Thomas' proposal with a separate key file anyway;
sooner or later we have to support WPA too, and will get the same problem. So we
should aim to externalize the key file (if this is relevant to WPA) for Breezy.