[tryp4vps]

...... The attackers can't guess your WPA2 passphrase, they can just replace incorrectly configured https certifications and do man in the middle attacks.

I do not think the attackers need to guess your WPA2 passphrase. According to this exploit, the attackers can possibly decrypt the packets directly with the key reinstallation attacks. So, having a secure WPA2 passphrase cannot prevent or mitigate the attacks at all.