Comment Re:Srsly? (Score 3, Insightful) 250
As a network administrator for a small local ISP I have to say I would absolutely loathe this proposal. I can't even begin to imagine the infrastructure and management nightmare to do something like this at all of our locations.
So OK, you use encryption for your APs, which you then have to give the password out to your customers making the wireless in effect public anyway.
Or do you propose we only use WPA2-EAP? So what, we have to not only manage each account individually, but I assume we have to do personnel verification? We simply could have some sort of web based account creation, but would we be held liable if they forged/stole the information? Do we have to do some sort of credit card authorization to make sure the person is who they say they are or do we have to see their ID personally? This kind of defeats the purpose of wireless in some locales.
And I assume they will want us to log all of the traffic otherwise we'd have to route our public IPs. While in and of itself is not that difficult, most of the time this would be increasingly difficult. Have you priced peering lately? It's not cheap and we're running out of IPs, running NAT at these places is sometimes the only way to bring wireless there. If we can run NAT but have to log the traffic the kind of hardware necessary in order to retain logs for any length of time and keeping it low latency is pretty astronomical and economically infeasible.
So here's a list of services that they will have to run in order to comply with this: Account management/key storage(ldap), Authentication(RADIUS), Account Creation(web whatever), Packet Logging(ntop) OR Peering Connection/Routable IPs, some sort of database for log retention, and an AP capable of handling the processing power for WPA2-EAP/Authentication. Oh plus you'll need someone to implement and administrate it.
Does the government plan on paying for this? While the company I work for has the ability to do this and we do for some locations, doing it everywhere would be a nightmare. Not to mention how ripe for abuse this whole system would be. There's a reason why it's not already done. It's expensive, time consuming, hurts the service, and it's easy to get around.
This is a dumb idea and it won't work. It will put smaller ISPs out of business and even the big ones will have trouble with it. And what do we do about Mom and Pop that don't know how to secure their own wireless? Do they now become liable if someone uses their connection?
The hell happened to common carrier status?