Skip to Content.
Sympa Menu

cat-users - Re: [cat-users] Hardening of web server - <frame> difficulties?

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [cat-users] Hardening of web server - <frame> difficulties?


Chronological Thread 
  • From: Tomasz Wolniewicz <twoln AT umk.pl>
  • To: Alan Buxey <A.L.M.Buxey AT lboro.ac.uk>, cat-users AT geant.net
  • Subject: Re: [cat-users] Hardening of web server - <frame> difficulties?
  • Date: Mon, 19 Oct 2015 13:24:43 +0200
  • List-archive: <https://mail.geant.net/mailman/private/cat-users/>
  • List-id: "The mailing list for users of the eduroam Configuration Assistant Tool \(CAT\)" <cat-users.geant.net>



W dniu 2015-10-19 o 12:45, Alan Buxey pisze:
> However. If embedding the CAT page allows many sites to offer some
> setup system within the framework of their wireless systems, allowing
> them to provide eduroam to their users and allowing their users to be
> configured correctly then we'd be shooting ourselves in the foot and
> causing eduroam to be a problem for them and a disservice to sites.
> Which would be a shame. These things need to be in balance with
> perspective (hence my question of whether this is a valid security
> concern for eduroam CAT web pages). To often it appears that a few
> people with little end organisation exposure are making decisions
> which affect thousands of sites and millions of end users.
I guess this depends what we are calling "embedding". At NCU we provide
our own user instructions page but point to the installer download links
directly to CAT, via the UserAPI. I think that this is absolutely fine.
What I would be against, would be embedding the entire CAT GUI as a
frame, for this I do not see any arguments.

Tomasz

>
> At least ensure that ALL federations in CAT have had time to make
> announcements of this (i can tell you that many orgs are not on this
> mailing list! ) so that sites have a chance to respond/feedback.
>
>
> alan

--
Tomasz Wolniewicz

twoln AT umk.pl
http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University,
pl. Rapackiego 1, Torun pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750 fax: +48-56-622-1850 tel kom.: +48-693-032-576






Archive powered by MHonArc 2.6.19.

Top of Page