For a variety of reasons it doesn't really matter if you authenticate the hotspot if the rest of the traffic goes in the clear as unless you also do key exchange as part of the authentication and then use it for protecting your traffic someone could just forward the authentication to a real box and then take over or simply hijack your connection after you've authenticated. There is also the problem of wide deployments like coffee shops making it pretty easy to steal certificates.
WPA Enterprise / WPA2 Enterprise with PEAP (and several other flavors) includes a server certificate as part of the authentication process that you can validate before supplying your credentials. While it's not perfect, you can run public wifi with WPA2 Enterprise and just set the login to guest and a blank password (and say that in the ESSID). That allows anyone to connect but still allows them to authenticate the hotspot and have a fair level of protection from session snooping or hijacking.
Realistically future versions of 802.11 should use some type of system like that for unprotected connections, but they don't seem very interested.
Yea, EAP-TLS was one of the oldest EAP methods, and the client certificate is actually optional per the spec, though most supplicants require it (using a dummy cert is the workaround).
WPA Enterprise / WPA2 Enterprise with PEAP (and several other flavors) includes a server certificate as part of the authentication process that you can validate before supplying your credentials. While it's not perfect, you can run public wifi with WPA2 Enterprise and just set the login to guest and a blank password (and say that in the ESSID). That allows anyone to connect but still allows them to authenticate the hotspot and have a fair level of protection from session snooping or hijacking.
Realistically future versions of 802.11 should use some type of system like that for unprotected connections, but they don't seem very interested.