24Nis
How does a password prevent an evil twin if the password is publicly known?
This discussion of WPA3 OWE seems to imply that WiFi at Starbucks/the airport/whatever can be secured against an evil twin attack if they use WPA3-Personal instead of OWE. But it seems like that wouldn't actually do anything.
If I'm at some place with public WiFi, that necessarily means the password is public. So what prevents me from setting up an evil twin using the same password? It seems to me that there's no real difference between OWE and WPA3-Personal if the password is public.
