and the public hotspots are clearly separated within the customer-installed gateway. Lower case "xfinitywifi" SSIDs are open, which means they are not encrypted from device to access point (AP).