Re: [WLANtalk] Wifi4EU - EU-weites Authentifizierungssystem mittels Handynummern? (Wifi4EU - EU-wide authentication system using mobile numbers?)

[Valent Turkovic]

Hi Linus,
European Comision should have these answers, but I wouldn't hold my
breath for any detailed answer...
If you haven't seen Wifi4EU page has "Contact us" button, so I would
suggest you try to ask there directly:
https://ec.europa.eu/digital-single-market/en/policies/wifi4eu-free-wi-fi-europeans

Please share back your findings!

Cheers,
Valent.

On Wed, Apr 4, 2018 at 8:05 PM, Linus Lüssing  wrote:
> On Wed, Apr 04, 2018 at 10:34:24AM -0400, val...@otvorenamreza.org wrote:
>> Here is what it says on last page of this webminar presentation:
>>
>> Wi-Fi Access Point requirements:
> [...]
>> 3. APs to support 802.1x
>> 4. AP to support at least 3 different SSIDs
>
> This captive portal and the 3 different SSIDs mentioned in those slides
> - how are things supposed to work from a user perspective?
>
> Would the user 1. connect to an unencrypted "Wifi4EU" and would be
> redirected to a captive portal there. 2. would sign up and would
> get a unique password or certificate in return. And 3. would need
> to switch to the encrypted, WPA-Enterprise/802.1x secured network?
>
> Or what is the captive portal mentioned in those slides or "need
> to embed javascript code from EC for monitoring purposes" supposed
> to mean exactly?
>
> Regards, Linus
___
WLANtalk mailing list
WLANtalk@freifunk.net
Abonnement abbestellen? -> 
http://lists.freifunk.net/mailman/listinfo/wlantalk-freifunk.net

Weitere Infos zu den freifunk.net Mailinglisten und zur An- und Abmeldung unter 
http://freifunk.net/mailinglisten

Re: [WLANtalk] Wifi4EU - EU-weites Authentifizierungssystem mittels Handynummern? (Wifi4EU - EU-wide authentication system using mobile numbers?)

[Linus Lüssing]

Hi Nicco and Valent,

Thanks for sharing, very interesting!

On Wed, Apr 04, 2018 at 10:34:24AM -0400, val...@otvorenamreza.org wrote:
[...]
> Regarding Hotspot 2.0 I saw this information (and other information) on
> webminar that EC shared to all national regulation bodies. Our (Croatian)
> regulation body (Hakom) shared this webminar on their web page:
> https://nop.hakom.hr/aktualnosti/wifi4eu-novosti-i-dodatne-informacije/262
> http://nop.hakom.hr/UserDocsImages/Dokumenti/wifi4eu_-_bco_webinar_jan_2018.pdf
> 
> 
> Here is what it says on last page of this webminar presentation:
[...]
> 
> Wi-Fi Access Point requirements:
[...]
> 3. APs to support 802.1x

I am currently wondering what this would imply. Especially: Would
this result in a limitation of who would be allowed to access,
administrate or update the router/firmware?

Afaik in eduroam setups the 802.1x authenticator is run on the
wifi router. Therefore the wifi router needs its own set of
cryptographic keys which it may not share publically and data
will be encrypted between client device and wifi router only.
Please correct me if I'm wrong.

Technically, I think it might be possible to move the 802.1x
authenticator out of a wifi/mesh router to some remote server
and having the encrypted tunnel between client device and this
server. But at least hostapd is not able to do this right now
as far as I know (and I'm wondering whether EAPOL would start
to have issues due to the extra delay).


Sorry for these specific, technical questions at this early point.
But I'm trying to get a picture of how, if at all, running Wifi4EU
and Freifunk on the same mesh node were technically doable.

Regards, Linus
___
WLANtalk mailing list
WLANtalk@freifunk.net
Abonnement abbestellen? -> 
http://lists.freifunk.net/mailman/listinfo/wlantalk-freifunk.net

Weitere Infos zu den freifunk.net Mailinglisten und zur An- und Abmeldung unter 
http://freifunk.net/mailinglisten

Re: [WLANtalk] Wifi4EU - EU-weites Authentifizierungssystem mittels Handynummern? (Wifi4EU - EU-wide authentication system using mobile numbers?)

[valent]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi Nico and all,
no EU funds are to be spend on VAT, this is a known practice. Just ask any
EU project consultant and she/he can give you more information regarding
this.

If European Commission makes Wifi4EU project tax exempt then municipalities
won't have to pay VAT, but this has not happened yet. I got this
information from really big national wifi installation company who got this
information directly from their Euopean Commision (EC) contacts. Best is to
confirm this information not from me but by writing directly to EC email
that they have listed on official Wifi4EU web page.

Regarding Hotspot 2.0 I saw this information (and other information) on
webminar that EC shared to all national regulation bodies. Our (Croatian)
regulation body (Hakom) shared this webminar on their web page:
https://nop.hakom.hr/aktualnosti/wifi4eu-novosti-i-dodatne-informacije/262
http://nop.hakom.hr/UserDocsImages/Dokumenti/wifi4eu_-_bco_webinar_jan_2018.pdf


Here is what it says on last page of this webminar presentation:

Wi-Fi Access Point requirements:
1. Number and location of APs to be declared
2. APs to comply with 802.11ac Wave I
3. APs to support 802.1x
4. AP to support at least 3 different SSIDs
5. AP will be able to handle at least 50 concurrent users without
performance degradation

6. Under consideration:
• Nxn MIMO
• Beamforming
• Filters to prevent LTE interference
• Passpoint
• Upgradable to WPA3


802.1x authentication is part of Hotspot 2.0
-BEGIN PGP SIGNATURE-
Version: FlowCrypt 5.4.2 Gmail Encryption flowcrypt.com
Comment: Seamlessly send, receive and search encrypted email
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=sgUO
-END PGP SIGNATURE-
___
WLANtalk mailing list
WLANtalk@freifunk.net
Abonnement abbestellen? -> 
http://lists.freifunk.net/mailman/listinfo/wlantalk-freifunk.net

Weitere Infos zu den freifunk.net Mailinglisten und zur An- und Abmeldung unter 
http://freifunk.net/mailinglisten