Understood, but few Wi-Fi operators actually support Passpoint on their networks. Since Apple is eliminating the alternatives, they either must be idiots (my bet) or have a proposal for what we should all being doing instead.
I still get really confused looks when I try to discuss Passpoint with my contacts at the major cellular providers, so it can't possibly be a realistic option for most of us. From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> On Behalf Of Tim Cappalli Sent: Friday, July 10, 2020 4:07 PM To: [email protected] Subject: Re: [WIRELESS-LAN] MAC Randomization, a step further... Not sure I follow. Passpoint is an industry-wide solution for secure Wi-Fi roaming. Passpoint has been supported on iOS and macOS (along with Windows and Android) for a number of years. I definitely don't follow this comment: "you can't onboard your Apple to enable identity-based auth." tim From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]<mailto:[email protected]>> Date: Friday, July 10, 2020 at 16:04 To: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Subject: Re: [WIRELESS-LAN] MAC Randomization, a step further... So you can't use an Apple MAC address for guest auth, and you can't onboard your Apple to enable identity-based auth. Apple must be thinking that they can drag the entire world, kicking and screaming, into federated authentication that Apple products ship knowing how to do (Passpoint, openroaming, etc.). Do they have a proposal for this that I missed? From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]<mailto:[email protected]>> On Behalf Of Rios, Hector J Sent: Friday, July 10, 2020 2:56 PM To: [email protected]<mailto:[email protected]> Subject: [WIRELESS-LAN] MAC Randomization, a step further... Apple is moving forward with their privacy efforts. The next step is to randomize MAC addresses when connecting to an AP, not just when probing. This is coming soon. https://globalreachtech.com/blog-mac-randomisation-apple/<https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fglobalreachtech.com%2Fblog-mac-randomisation-apple%2F&data=02%7C01%7Ccae104%40PSU.EDU%7Cdc3d30da288b43b479b208d8250cd785%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300084702161600&sdata=OySCPec8F%2Bo8%2Bj7%2FgHf1pAAkZssc6wKI4knXRKc%2FXP8%3D&reserved=0> This is from Apple. Luckily, there is a way to disable private addresses. I just don't know if it will be ON by default. https://support.apple.com/en-qa/HT211227<https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.apple.com%2Fen-qa%2FHT211227&data=02%7C01%7Ccae104%40PSU.EDU%7Cdc3d30da288b43b479b208d8250cd785%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300084702171600&sdata=ihCfwwA7KIv%2BTDgd%2BWpswPXchGdQnz2SpZ5N4QiXdeo%3D&reserved=0> Happy Friday! Hector Rios, Wireless Network Architect The University of Texas at Austin ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cdc3d30da288b43b479b208d8250cd785%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300084702171600&sdata=PA0rUnyy0RHm%2Fv4WFgOwZP4h0vx2mH8SHvW68rPds0U%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cdc3d30da288b43b479b208d8250cd785%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300084702181595&sdata=ZYuB5tlvbwZMOXUPJh1ol1PP4SFTxBRlDQAqHRdS7%2FE%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7Cdc3d30da288b43b479b208d8250cd785%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637300084702191591&sdata=azJ04kTDFBfle%2Bm6xS9plTLjmHJRQf6zHA9OLO6tyRo%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
