Wireless security is not much different from wired security. However, wireless has some unique difficulties, such as limited bandwidth, high latency and unstable connections. Several options just around the corner address these issues. WTLS provides for client or server authentication and allows for encryption based on negotiated parameters between the handheld device and the WAP gateway. WTLS's key exchange protocol is uniquely suited for wireless applications.
Vendors can implement any of three classes of authentication types.
The client forms an encrypted connection with an unknown server. Bear in mind that WTLS certificates are not the same as X.509 certificates, and they can't be used interchangeably. Client certificates required for Class 3 authentication pose special management problems. Client certificates need not be retained on the handheld device. Rather, during negotiation, the client may refer the WTLS gateway to a directory to retrieve the client certificate from a directory.