2 Apr
2019
2 Apr
'19
9:56 a.m.
On Tue, Apr 02, 2019 at 03:48:13PM +0200, Sebastian Hagedorn wrote: [...]
certificate the RADIUS server presents – especially Android devices don't usually do that.
Just as a sidenote, Android does support EAP-PWD, which works without certificates and uses some kind of zero knowledge proof to authenticate the parties (radius, wifi client) to each other, at the small drawback of transmitting the user name in plain text. Thus, EAP-PWD should always be safe to use with eduroam regardless of how the end user's device is configured. -HC