eduroam Development VC Minutes 2024-10-08 1530 CEST
Attendance
Attendees
- Stefan Winter (Restena)
- Stefan Paetow (Jisc - coming to you live from the WGC)
- Paul Dekkers (SURF - next to Stefan at WGC)
- Ed Kingscote (CANARIE)
- Derek Eiler (NSHE)
- Mike Zawacki (Internet2)
- Christian Rohrer (Switch)
- Tomasz Wolniewicz (PSNC)
- Alan DeKok (FreeRADIUS)
- Zbigniew Ołtuszyk (PSNC)
- Louis Twomey (HEAnet)
- Anders Nilsson (SUNET)
- Fabian Mauchle (Switch)
- Frederic Gerber (Switch)
- Maja Górecka-Wolniewicz (PSNC)
- Wenche Backman-Kamila (CSC/Funet)
- Guy Halse (TENET), late
- Ed Wincott (Jisc), late
Regrets
- Zenon Mousmoulas (GRNET)
- Janfred Rieckers (DFN)
Agenda / Proceedings
Welcome / Agenda Bashing
WPA3 no-transition for eduroam
- testing from TNC presentation 2024 showed very good compatibility
- we still suggest WPA2/3 Transition Mode
- can we level up to suggest WPA3 (pure)?
- Safe to do so on new deployments; as it can’t possibly DoS any existing users
- small hiccups can’t be excluded (both ways - with and without transition mode); but can be worth it
- not necessary to make WPA3 mandatory - no significant attacks on it yet, and not everybody has WPA3 equipment
- We should make clear the “transition-complete” flag is NEVER set
- cross-check with the eduroam Service Definition - is it (currently) okay to do WPA3-only?
- Everyone is invited to test (oldish) devices for their WPA3 compatibility (i.e. support for PMF)
Portnox update
- company listening to the needs of our community
- Jisc working with them for testing of functionalities
- Hopefully Jisc are able to make things work which should make life easier for existing customer in .ca
OpenRoaming / WBA Meeting update
- meeting currently happening, hot-off-the-press news
- meetings with Cisco, Google, all very productive
- Interest in testing with eduroam, and working on the list of issues we see
- discussions with WBA around becoming an I-CA for IdP and ANP are still continuing (rules are being revised)
- even without I-CA: possible to issue certs as an agent
- you can now register your interest (best to get certs after 2 Dec, as the root rolls over at that time)
- what is the scope for issuing? NROs only? Issue certs to institutions? Individually, or only after approval by NRO.
NRO Update
- Chris Philipps is no longer an NRO admin for .ca
AOB1
- IETF radext interim meeting tonight (20:00 CEST)
AOB2
- geteduroam: redirect profile question
- this is about redirects NOT to the geteduroam portal, but a third-party website.
- geteduroam app seems not to open a browser to that URL
- error was reproducible in VC (Android), Paul takes it to the devs
- How to report issues like this? Slack, GitHub Issues, talking to Paul, all work.
Next VC
- 22 Oct 2024, 1530 CEST