First, for purposes of this comment I only need to address the situation where WPA2 is currently used (the majority of private APs). Second, I&#x27;m one person taking a few minutes to write a HN comment, not a design committee.<p>Simple protocol: The AP and client have shared secret K (similar to the present WPA2 key). We define the identity of a network as this secret key. The AP can change &quot;BSSID&quot; every hour, while broadcasting [BSSID, Hash(BSSID, K)]. An interested client runs through their database of known private networks, checking if the broadcaster is any they know.<p>This obviously has a number of shortcomings (eg our attacker is also known to groom people into uploading K to their silos), but it should illustrate the concept.