Re: WPA or WPA2?
There may be unbreakable systems, but if you are resposible for the security of an organisation, the only safe assumption is that single point encryption can be broken. ie: the channel is assumed to be insecure facing an adversary with sufficient resources. . There are probably any number of ways to mitigate weak wifi encryption. ie: encrypting the data before it reaches the wifi router and at an access control level, doing things like mac address filtering and using radius server. Not foolpropf, but makes the task more difficult.
Good security is not just about one aspect, but should be an integrated approach where as many of the possible holes are accounted for. Engineering applies: Speed, Security Cost. Pick any two :-)...
Biting the hand that feeds IT
