Is it feasible for existing hotspots to run with last year's security - "insecurely" as you put it - and also to run a separate network with the new security, in the same location?

The two networks don't have to be the same capacity; start with a smaller one, maybe, for clued-up, secured-up users, and, as the population switches over, turn the new security on on the larger network, and off on the small one. I suppose this model could be overtaken by growth anyway, but there's a limit to how many laptops can fit on one burger bar's tables.

How about running the service with new security switched on 8am-6pm, and then less securely during evenings and weekends?

.

We can, of course, hope that the new IEEE wireless networking standard - the security one, 802.11i - gets over the current problem with access points.

On the other hand, it's also possible that it will become mandatory to have security on. "A Good Thing TOO!" many will cry. Well, for corporate IT managers working for a hospital with legislative privacy to maintain, sure! - but will it really work with the typical Starbucks surfer?