about "Open System" and "Shared System" Authentication Type?

[c4linux c4linux]

Thanks for your help
But i found that if I set AP with a password in an OpenSystem
Authentication, STA can always connect the AP and access its resource , Why?
OpenSystem Authentication need no password?

2008/10/16 Dan Williams <dcbw at redhat.com>

> On Thu, 2008-10-16 at 10:20 +0800, c4linux c4linux wrote:
> > >>Open System actually doesn't do authentication.
> >
> >
> > authentication = encryption?
>
> No, they are different.  But Shared Key authentication _uses_ the WEP
> encryption algorithm as access control.
>
> > So Why I can do WEP encryption in an Open System authentication? I'm
> > confused between authentication and encryption :(
>
> They are two different things.  Authentication determines whether or not
> a user is allowed to access the system in the first place, while
> encryption protects the content of their messages _after_ they have been
> granted access to the system.  But to preserve security and prevent
> spoofed authentications, some authentication methods also employ
> encryption as part of the process, but it's a separate step from the
> encryption that happens after the user has gained access to the system.
>
> Dan
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20081125/150d1823/attachment.htm