The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Gerrard Shaw <GShaw AT havering-college.ac.uk>]

Hi Alan,

 

Would be for Home and Visited users in theory – the Walled Garden would be going outbound via a separate Internet connection that has no access to the rest of the network.

 

If we hosted the CAT app’s apk file locally wouldn’t we get a different problem that users would have to allow sideloading by reducing their Play Store security?

 

Realistically it’s only going to be UK institutions coming in and I suspect most if not all of those are using the standard CAT site (please correct me if I’m wrong on that assumption).

 

I agree that the amount of Google allow rules isn’t ideal but given we keep the connection completely isolated from anything of importance may be a compromise we need to make to ensure the onboarding is as smooth as possible. It’s a shame Android don’t support the profiles in a neater way but that’s the joy of multiple platforms I guess!

 

Regards,

 

Gerrard

 

From: Alan Buxey [mailto:alan.buxey AT gmail.com]
Sent: 04 May 2018 10:04
To: Gerrard Shaw <GShaw AT havering-college.ac.uk>
Cc: cat-users AT lists.geant.org
Subject: Re: [[cat-users]] CAT \ Google Play domains

 

hi,

 

so that eduroamCAT can be used by your users or for non local users to use it too?  In the first instance you 

may be better off either hosting the files yourself locally for download (eg directly from captive portal) - for the latter

you will face other issues such as those federations that have their own eduroamCAT instantiation (eg Germany) - you

will need to find and add all those URLs or institutions that run their own copy (unknown number....not recorded or logged).

but also this allows someone to access and use many google services without having to log in (they could also attack such 

infrastructure) 

 

 

 

alan

This message is sent in confidence for the addressee only. It may contain confidential or sensitive information. The contents are not to be disclosed to anyone other than the addressee. Unauthorised recipients are requested to preserve this confidentiality and to advise us of any errors in transmission. Thank you. Please note that the College reserves the right to monitor emails for the business purposes contained in the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000, that is: to establish the existence of facts relevant to the business of the College, to investigate or detect unauthorised use of the systems; to maintain the effective operation of the system; to detect any computer viruses; to check the mailbox of any absent employees; or to prevent or detect a crime. To be able to exercise these rights, the College must have made all reasonable attempts to inform every person who may use the system that monitoring and interception may take place. This College regards this notice to you as notification of such a possibility.