<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
<META content="MSHTML 6.00.6000.16397" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>You can visit the US-CERT website at <A
href="http://www.us-cert.gov/reading_room/">http://www.us-cert.gov/reading_room/</A>
for overview and recommendations on wireless.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Jerry</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=brandon.galbraith@gmail.com
href="mailto:brandon.galbraith@gmail.com">Brandon Galbraith</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=MBORBA@trf3.gov.br
href="mailto:MBORBA@trf3.gov.br">MARLON BORBA</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Cc:</B> <A title=deepak@ai.net
href="mailto:deepak@ai.net">Deepak Jain</A> ; <A title=nanog@merit.edu
href="mailto:nanog@merit.edu">nanog@merit.edu</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Friday, April 27, 2007 7:21
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: Open WiFi Access Point
BCP's???</DIV>
<DIV><BR></DIV>On 4/27/07, <B class=gmail_sendername>MARLON BORBA</B> <<A
href="mailto:MBORBA@trf3.gov.br">MBORBA@trf3.gov.br</A>> wrote:
<DIV><SPAN class=gmail_quote></SPAN>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid"><BR>If
you want to follow just one rule, it's this:-<BR><BR>Instruct your users to
never (I mean NEVER) use applications which run<BR>over unencrypted
protocols.<BR>Security
first.<BR><BR><BR>Abraços,<BR><BR></BLOCKQUOTE></DIV><BR>Indeed. If you know
ahead of time unencrypted 802.11(whatever) is going to be used, *always* use a
VPN or tunnel of some sort to secure your traffic (if the apps you'll be using
have no native encryption).<BR></BLOCKQUOTE></BODY></HTML>