eduroam Development VC Minutes 2026-02-24

Attendance

Welcome / Agenda Bashing
A vulnerability on the non-Wifi part of Wi-Fi networks
- Page for Paper: https://www.ndss-symposium.org/ndss-paper/airsnitch-demystifying-and-breaking-client-isolation-in-wi-fi-networks/
- Paper direct link: https://www.ndss-symposium.org/wp-content/uploads/2026-f1282-paper.pdf
CAT
- wired support:
  - approx. 800 institutions have this option set
  - fate of support for Linux?
  - one option is to push people to geteduroam, and support only there
  - eduroam UK can approach their wired-enabled IdPs and ask them why and how important it is. Tomasz to send a list of IdPs with this option enabled.
  - It is not a roaming feature - rather for local dormitories and own students
geteduroam
- OpenRoaming support on Android?
  - probably rather because geteduroam has an RSA and EcDSA root; and Android can’t cope with that in the OpenRoaming configuration context.
  - PAUL after the previous call: Android cannot handle >1 CA certificate, and in the pseudo accounts we currently provide 2. Is that maybe it?
  - desirable to have consistent behaviour on all platforms
  - PPS-MO spec (WFA config format, with WBA extensions) might be at fault: allowing only one CA?
IETF