The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Alan Buxey <alan.buxey AT gmail.com>]

section 6.2.2 of the eduroam policy . - requirements/duties of eduroam operators, federation operators etc. 

suffice to say, institutions that instruct their users to just click on SSID and put in their username/password (some even go as far to say uncheck the CA check! :(

are doing it wrong and opening their users devices to attack vectors [and those more insidious attackers can find this info on the web and target such sites]

- such institutions should be approached by their NRO to remediate these issues

..after all, the need for manual instructions and the friction of expensive deployment tools was the exact reason eduroamCAT exists...  :)

alan