AES encrypted passwords

[Alan DeKok]

On Sep 30, 2016, at 6:53 AM, freeradius-users at latter.org wrote:
> However I have just looked at the instructions we give to users
> wishing to connect their Windows 8 machine to the wifi network
> and have seen this:
> 
> - Untick “Verify the server’s identity by validating the certificate”

  Which means that you have no security.

  This is MUCH worse than storing clear-text passwords in the database.

  I really wish that amateurs would stop trying to design security systems.  They get most things wrong.

  Alan DeKok.