i'm assuming most home users aren't setting up a freeradius server, so they're not going to be running enterprise. yes, tkip = easy; aes, not so easy - but it was announced in August. Couple of Germans, iirc. Something like 2 billion years if you had one trillion machines trying one million keys/second. So for now, aes is good. Personally, i just don't broadcast my ssid and i haz an un-complex (but long) password. i'm not worried - I'm pretty sure the Westerville 5-0 doesn't have the skills to to find my non-advertised name, let alone find a MAC they can use and then figure out my password. I'll see the patrol car parked in the driveway long before they get on my network...