The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Ralf Paffrath <paffrath AT dfn.de>]

Hi Stefan,

> On 09 Nov 2015, at 10:37, Stefan Winter 
> <stefan.winter AT restena.lu>
>  wrote:
> 
> Hello,
> 
>>> In our opinion a model with CAT as the central repository for all 
>>> profiles is best.
>> 
>> Might be, but if the central profile repository is beyond your country we 
>> have to discuss about legal certainty, I mean in case of a bugged 
>> repository and may I remind you to the SecureW2 affair, we can’t exclude 
>> this. 
> 
> What specifically did you find suboptimal about our handling of SecureW2?

I did not say it was suboptimal.

> 
> Since we operate a big central instance, we took the intial wave of
> hits, set up and paid for significant amounts of legal advice, fixed our
> code within hours (your instance is necessarily a little timeframe
> behind our hotfixes, so yours was necessarily exposing possibly affected
> installers for a longer time), and are dealing with the aftermath of the
> incident, e.g. by working on a replacement product.
>  
> Did/do you provide German institutions with some kind of superior
> protection compared to what we did?

You don’t give us access to hotfixes but blame me that I’m behind. 
The discussion is becoming more obscure.  

> 

>> Again good point, since we offer our own CAT instance based on eduroam CAT 
>> code only around 100 of around 300 IDPs are using CAT. I’m afraid they are 
>> not convinced about eduroam CAT.
> 
> Oh, but that's great! The product has conquered a third of the available
> market! And that with significant competition available - several
> commercial ones, some that even come bundled ("free") with the Wi-Fi
> infrastructure, and of course our probably most fierce competitor "no
> need to do anything / PDFs are fine" attitude.
> 
> Maybe you are disappointed about ~ 33% market share - I'm not :-)
> 
> Considering that the remaining 67% are somehow distributed among say 5
> commercial alternatives plus the do-nothing-attitudes, one could
> probably say that we're #1 in terms of market share :-)
> 

Could be 67% of unsecured eduroam configuration around!

Greetings
   Ralf 
> Greetings,
> 
> Stefan Winter
> 
> -- 
> Stefan WINTER
> Ingenieur de Recherche
> Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
> de la Recherche
> 2, avenue de l'Université
> L-4365 Esch-sur-Alzette
> 
> Tel: +352 424409 1
> Fax: +352 422473
> 
> PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
> recipient's key is known to me
> 
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
> <0x8A39DC66.asc>
--
Verein zur Förderung eines Deutschen Forschungsnetzes e.V.
Alexanderplatz 1, D - 10178 Berlin
Tel.: 030 88 42 99 23
Fax: 030 88 42 99 70
http://www.dfn.de

Attachment: smime.p7s
Description: S/MIME cryptographic signature