On Mon, Jul 20, 2026 at 06:09:12PM +0200, landry@openbsd.org wrote:
> though im not sure it actually uses wpa3 or fallbacks to wpa2.
> 'ifconfig qwx0 wpaprotos wpa3' doesnt seem to remove wpa2 from
> wpaprotos,

Indeed. This is a cosmetic issue.
I will need to think a bit about what to do here.

>so what should be done to ensure wpa3 is used ?
> configure an ssid with only wpa3 ?

Until ifconfig output is improved somehow, enable debugging with:

  ifconfig qwx0 debug

And look for lines in dmesg which indicate that SAE authentication
is being used.