Re: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-17 Thread Tim Cappalli
Community Group Listserv on behalf of Enfield, Chuck Sent: Sunday, January 17, 2021 1:48:11 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification James, So far this has been a largely technical discussion

RE: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-17 Thread Enfield, Chuck
uary 16, 2021 9:31 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification I’m arguing on behalf of the many poorly-resourced environments where NPS has a marginal cost of zero, and that enabling TOFU would be a simple t

Re: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
Andrewartha Date: Saturday, January 16, 2021 at 21:31 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification I’m arguing on behalf of the many poorly-resourced environments where NPS has a marginal cost of zero

RE: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread James Andrewartha
a Ph. (08) 9442 1757 Mob. 0424 160 877 From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Turpin, Max Sent: Sunday, 17 January 2021 7:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification You do

Re: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Turpin, Max
SS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Because trust on first use is almost as bad as not trusting at all. Properly deploy 802.1X or don't use it. Sorry to be harsh but this same conversation multiple times per year, every year is tiring.

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
, 2021 at 10:56 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Certificate enrolment sucks for BYOD though, there’s no ongoing posture checking, and you have to maintain a CA and CRL. SSH uses TOFU and is more comparable to RADIUS in that you

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Certificate enrolment sucks for BYOD though, there’s no ongoing posture checking, and you have to maintain a CA and CRL. SSH uses TOFU and is more comparable to RADIUS in that you only connect to a limited number

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread James Andrewartha
nity Group Listserv On Behalf Of Tim Cappalli Sent: Saturday, 16 January 2021 11:33 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification EAP-TLS is modern, strong authentication. And enrollment can even use passwordless. Imagine of browsers oper

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
, 2021 10:31:27 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification I disagree, but OWE or SAE with a captive portal then? At least I can use modern authentication methods like hardware keys and TOTP with a browser. -- James Andrewartha Network

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread James Andrewartha
877 From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Tim Cappalli Sent: Saturday, 16 January 2021 11:24 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Because trust on first use is almost as bad as not trusting at

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
Listserv on behalf of James Andrewartha Sent: Saturday, January 16, 2021 10:11:00 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Why couldn’t Google add trust-on-first-use to Android like Apple has with iOS and macOS, and Microsoft has

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread James Andrewartha
less Issues Community Group Listserv On Behalf Of Tim Cappalli Sent: Saturday, 16 January 2021 6:28 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification > "many colleges provided instructions as such." This is one of the many reasons th

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-15 Thread Tim Cappalli
ues Community Group Listserv on behalf of Angelo Santabarbara Date: Friday, January 15, 2021 at 17:25 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Correct Tim. I failed to clarify that you can no longer setup eduroam profiles manually with

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Floyd, Brad
Thanks for the clarification Tim. That's why you're the man! Brad From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Tim Cappalli Sent: Thursday, January 14, 2021 5:02 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Tim Cappalli
, January 14, 2021 4:58 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification [EXTERNAL SENDER] We are instructing our users to use the eduroam CAT tool (https://cat.eduroam.org/<https://nam06.safelinks.protection.outlook.com/?url=https%3A

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Floyd, Brad
, 2021 4:58 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification [EXTERNAL SENDER] We are instructing our users to use the eduroam CAT tool (https://cat.eduroam.org/) that we configured to deploy a certificate. Best we could do now that Android

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Floyd, Brad
. Thanks, Brad Original message From: "Glinsky, Eric" Date: 1/14/21 4:13 PM (GMT-06:00) To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification [EXTERNAL SENDER] Is anyone starting to get complaints of not being able to connect

RE: Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Kyle Nielsen
f-8%26pending%3D>> Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Tim, et al, So the issue with advance certificate onboarding is that it requires a process in advance that most students would have issues with. Issuing certs in advance is more of a process for company-

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Glinsky, Eric
pending%3D>> Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Tim, et al, So the issue with advance certificate onboarding is that it requires a process in advance that most students would have issues with. Issuing certs in advance is more of a process for company-owned devices.

RE: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Sweetser, Frank E.
ess Issues Community Group Listserv On Behalf Of Chris Ressel Sent: Tuesday, October 13, 2020 6:51 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Android 11 and Cert Verification I am curious, for those who are onboarding, how are client

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Chris Ressel
I am curious, for those who are onboarding, how are clients provided restricted connectivity to download the onboarding installer/agent (secureW2, CAT, etc)? Do you have a provisioning SSID? Do you ask users to join your guest network? From a user experience perspective, I think it is

Re: [External] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Hunter Fuller
On Tue, Oct 13, 2020 at 1:26 PM Fishel Erps <0030ecf871d2-dmarc-requ...@listserv.educause.edu> wrote: > So the issue with advance certificate onboarding is that it requires a > process in advance that most students would have issues with. I just want to make sure you understand that the

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Tim Cappalli
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Tim, et al, So the issue with advance certificate onboarding is that it requires a process in advance that most students would have issues with. Issuing certs in advance is more of a process

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Fishel Erps
USE.EDU *Subject: *Re: [WIRELESS-LAN] Android 11 and Cert Verification Hi Philippe, Thanks for sharing. I’m interested to know if there are any higher Ed institutes out there that don’t onboard clients and push the necessary certs out? How will you be handling this change? Thanks Se

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Tim Cappalli
*organizations, not situations. From: The EDUCAUSE Wireless Issues Community Group Listserv Date: Tuesday, October 13, 2020 at 14:00 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Just do a quick Google search and you’ll see how many

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Tim Cappalli
Community Group Listserv Date: Tuesday, October 13, 2020 at 13:59 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification I too am also interested. Michael Catania Sr. Network Analyst Information Technology Services Loyola University Chicago P: 773.508.3712

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Catania, Michael
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Hi Philippe, Thanks for sharing. I’m interested to know if there are any higher Ed institutes out there that don’t onboard clients and push the necessary certs

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2020-10-13 Thread Gray, Sean
ITS, University of Lethbridge From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Philippe Hanset Sent: October 13, 2020 11:23 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Android 11 and Cert Verification Caution: This email was sent from someone out