[eenk]

Originally Posted by DNSB

The way I read it, you need the router vulnerable or KRACK will not work.

wrong. the attack is on the client side, also called station side afaik. Also, most wireless APs, that's the other side, implement the client side, so APs usually won't be vulnerable.