Educause Security Discussion mailing list archives

Re: 802.1X for wired ports


From: Mike Wiseman <mike.wiseman () UTORONTO CA>
Date: Thu, 17 Jun 2010 09:47:05 -0400




It’s just not possible without the user making the decision or having
his device configured in some secure way (which BTW applies to
websites also). Because an intruder can buy a cert for his radius
server so someone has to pick between radius.myschool.edu and
gotcha-radius.myschool.edu.

Mike

Well it would be between radius.myschool.edu and
gotcha-radius.myschooledu.com or something.. hopefully an attacker
wouldn't be able to get a valid cert under the correct domain.


Oops, you're right Justin - thanks.

Mike

Current thread: