Subject: An open discussion list for topics related to the geteduroam service
List archive
- From: Paul Dekkers <paul.dekkers AT surf.nl>
- To: Stefan Paetow <Stefan.Paetow AT jisc.ac.uk>
- Cc: "geteduroam AT lists.geant.org" <geteduroam AT lists.geant.org>
- Subject: Re: FW: Some screenshots
- Date: Thu, 31 Aug 2023 17:06:05 +0200
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=surf.nl; dmarc=pass action=none header.from=surf.nl; dkim=pass header.d=surf.nl; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=LqZWqTP3sNm1IT/HbUrU2v7uVt4rKi+Klx6/T8Tq3ow=; b=dLcNP9YgzXIOcXfcoCMqDos+dpg/3+2lFdhm6Tpon0iBoKe6evxNHe6l4+ZQ+e+3kSnFYHhBjh0YiX29oigMx1GtImyrHHD7TH8Yc9dc0og9L8yB8u7/nxwnn/jf1BsPBbmm0nMZaJcSxOdnkTnaK8g/+3wkuJh1QLzx2D4CqLncPH2kcsoDlS075AxHg1Llt9/DWepxOvu8xFySKWVVqSIeAcCR9l1E1hVnwGRyHzPKw6XRlid0lpfJYPuUbxkvIlFLhoxiJay19vXOLOzRq0xlf/9z8oT+Z7r5gItPnSCS1pdXd+cjUjfrARV+RfKXHg4aPZAVOdWYzMuR59SWGA==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jL70JOYCBUyFCjQ+Jks5Q89ILRlLBl56VZJrYfv8A9k5mrg5SR/WEqUOu24Eg0gVU0eK/I5qYdRkLN2ZDewYnQfOP2N/bEBm4a/SI34bTIsjP1c3CR1bQDzHi7SnIlxLg66COrtcdzkINAsbrANdoJnz4JNEvaZeMcgxk49oH+Jmby6cRHMppncPXygUhg3cEfR2n8KJUjA+ogtcmF/IGYNX1QGK4CgDsqFTsgRxQvAO6nFaYDFtA+bjaHwvMmWmlBwteLOID5Kk1EnJX/UhlFDUnjqpowsMvPJ884MmGyKu47etlYmRMq0C6pB94IpG/I3/B97+lsvTX4T4UHljvw==
- Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=surf.nl;
Hi Stefan,
I had a chat about this with our iOS developer, I'll proxy this
here:
469C3522-F296-49BC-BCB7-B5F8DD922D52 AT jisc.ac.uk">Hi folks,
So I've *finally* tried the new app on Apple (via Test Flight). I have some concerns. I've attached two screenshots (one of the old one, one of the new). The profile selected has realm enforcement switched on, and you can see that in the old screenshot it enforces that visibly in that when you switch focus away from the username, it automatically completes that.
The new username and password prompt is less user-friendly for several reasons:
1. It's a pop-up. That is quite a change from the old version.
It is indeed, but both a modal dialog and a popup are achieving the same thing: modally collecting some info from the user.
469C3522-F296-49BC-BCB7-B5F8DD922D52 AT jisc.ac.uk">
2. It does *not* automatically enforce the realm, in other words, if I just type 'eons.net', it just leaves it as that. That is a problem. It does do the realm enforcement *after* the password is prompted, so it's not like realm enforcement does not happen, but it is *not visible*, and thus this can return us to the bad old days of bad usability.
Indeed nicer to do this before so it is visible to the user. This
functionality has been added now.
469C3522-F296-49BC-BCB7-B5F8DD922D52 AT jisc.ac.uk">
3. It does not have the ability to view the password. The old one does not have that option either, but it's been on the issues list going on 2 years. Adding this will reduce password errors even more. See https://github.com/geteduroam/ionic-app/issues/104
There are some security concerns for this feature as it exposes
the password in variety of ways that doesn’t happen when using
secure entry. I agree that the ability to optionally show the
password if the user wants to is very helpful when typing more
difficult passwords. By default Apple doesn’t provide a way to
implement this using SwiftUI (but does for UIKit), or provide that
option in their UI on iOS and macOS anywhere that I am aware off.
I am know many other apps implement this feature, and I see the
added value, but we should consider this carefully.
469C3522-F296-49BC-BCB7-B5F8DD922D52 AT jisc.ac.uk">So, I'm obviously conscious of the fact that half of Europe is still on summer holidays, so when normal operations resume, could the developers of the new version be made aware of these issues and address them, please?
Thank you! :-)
Me again: feel free to continue the conversation here or on
Slack; I think there's pro's and con's to both, and I've heard
both sides/opinions. I think we're close to having a broader beta
try-out of the Apps (that we'll definitely announce on this list),
so we may have the opportunity to collect more feedback. (And see
if and how this (needs to) align with other platforms.)
Regards,
Paul
469C3522-F296-49BC-BCB7-B5F8DD922D52 AT jisc.ac.uk">
Stefan PaetowFederated Roaming Technical Specialist
eduroam(UK), Jisc
email/teams: stefan.paetow AT jisc.ac.uk
gpg: 0x3FCE5142
For eduroam support, please contact the eduroam team via help AT jisc.ac.uk and mark it for eduroam’s attention.
On Wednesdays and Fridays, I am not available between 12:00 and 15:00.
jisc.ac.uk
Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB Tel: 020 3697 5800.
Date: Wednesday, 16 August 2023 at 01:34
To: Stefan Paetow <Stefan.Paetow AT jisc.ac.uk>
Subject: Some screenshots
Hmmm, I don’t like the new prompt.
- FW: Some screenshots, Stefan Paetow, 08/16/2023
- Re: FW: Some screenshots, Paul Dekkers, 08/31/2023
Archive powered by MHonArc 2.6.24.