That's about what I expected to hear, but it's good to have confirmation.

I missed the part about the drivers needing PMF support. I don't have the
programming experience and knowledge to work on this stuff, otherwise I
would definitely consider helping out.

I am specifically interested in:

- athn
l have an AR9287 in my Eee PC 900. I like it because it has support across
many OSes. WPA3 support in this driver would also benefit newer hardware
with more capable 802.11ac cards such as the AR9462, though they still
aren't particularly common.

- ath
I have this super niche laptop with a VIA CPU. It has an AR2413 in the mini
PCI (*not* mini-PCIe) form factor, so I can't just simply replace it. The
only cards that use the ath driver are old ones that don't support 802.11n,
so this would have limited benefit vs. the amount of work required, unless
it would be easy to reuse the work from athn.

- iwx is done already, for my upgraded ThinkPad T430 which I actually use
and care about the most.

Drivers that stand out to me as being the most worthwhile to implement PMF
in are rtwn and mwx, as those are common and present in recent hardware.
Though I'm not really the one to make the judgement call on that and you
probably already have priorities based on what you know people are using.

Thanks,
Avraham Hollander

On Wed, Sep 16, 2026, 5:28 AM Stefan Sperling <stsp@stsp.name> wrote:

> On Tue, Sep 15, 2026 at 08:38:01PM -0400, Avraham Hollander wrote:
> > Hi. I hope I am replying to this correctly.
> >
> > It's been about a month since the last reply on this thread.
> >
> > Is there still a chance of this being merged for 8.0? Or is it too
> > late in the release cycle? If it is, that is totally understandable.
>
> Functionally, everything seems to be working as expected so far, but there
> is still some work left to do before the result can be committed.
>
> There is an on-going security audit which is mandatory for all projects
> funded by NGI zero. This audit is testing for things like downgrade
> attacks,
> which AFAIK nobody else has been doing. I do not want to commit anything
> before this audit has completed.
>
> Aside from NGI zero audit, I have received off-list review comments from
> other OpenBSD developers which I will need to address as well.
>
> I would rather see this feature go in during an early phase of the release
> cycle and have some runway left for fixing issues before the feature is
> shipped in a release. We are trying to keep things simple but there is
> still a lot of room for making mistakes.
>
> > Are you waiting for more testing feedback? I have an assortment of
> > cards, various Intel, Realtek, Qualcomm, and I think still have an
> > MT7921. I am willing to test at least some of them and see how they
> > fare.
>
> The main criteria for WPA3 support is whether our driver supports PMF (i.e.
> Protected Management Frames).
> All drivers which support PMF currently have already been tested with WPA3.
> If you need WPA3 in additional drivers, adding PMF support to those drivers
> (patches welcome) will allow WPA3 to work as well.
>