best practices to secure home's network

Jeff Liebermann <jeffl@comix.santa-cruz.ca.us> wrote:

> You should read the references supplied by John Navas.

The answer to my question was in the WiFi Net News article
<http://wifinetnews.com/archives/002452.html>:

"Thus even though each unicast pairing in the ESS has unique keys (PTK)
there is nothing private about these keys to any other device in the
ESS."

"Anyone with knowledge of the PSK can determine any PTK in the ESS
through passive sniffing of the wireless network, listening for those
all-important key exchange data frames."

You can use OpenVPN (available for Windows, Linux, Mac, Solaris, ... )
as logical AP, leaving WiFi just the low link layer connection.
OpenVPN offers much more secure protection than conventional WiFi ones
(WEP, WPA,...) - even Public Key Criptography if needed. -