OWE the open network that encrypts anyway

Encryption without a secret to share

Open networks were the last bastion of cleartext Wi-Fi: nothing to type meant nothing to derive keys from, and every frame flew readable. OWE (Opportunistic Wireless Encryption) closes that gap with the oldest trick in modern cryptography — Diffie-Hellman. During association, each side contributes a public key; both combine halves into a shared secret no observer can reconstruct; the standard 4-way handshake turns it into session keys.

The result reads like a contradiction: a network with no password where every client holds unique encryption keys. The person at the next table cannot read your traffic — not because a portal said so, but because the math says so.

What it solves, what it doesn't

OWE defeats the passive listener — the laptop quietly capturing a café's traffic. It does not defeat the active impostor: an evil twin broadcasting the same network name completes OWE happily and terminates your 'protection' itself. Encryption is not authentication, and this plate's failure scenarios make the difference tangible: the legacy device that lands on the cleartext half of a transition pair, and the attacker that OWE encrypts a tunnel straight into.