At Security Field Day, Aruba did a deep dive into a key feature of WPA3. Aruba had a lot of input into the successor to the long in the tooth WPA2, and detailed the optional Opportunistic Wireless encryption in the standard. This provides encryption for open wireless networks for information passed in the clear outside of the application payload. Tom Hollingsworth makes the argument that this should be a mandatory part of the standard, providing true defense in depth for traffic that falls outside SSL/TLS.
