Timeline for School Wifi Certificate
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 2, 2018 at 19:13 | comment | added | Out of Band | @YLearn - yes, I agree. Still think it's a bad idea, though. | |
| Mar 1, 2018 at 23:05 | comment | added | YLearn | @Pascal, not accepting a root CA from your school can make your wireless authentication less secure. While I understand the point you are trying to make, your statement is only true when they are using the root CA to do SSL interception, not wireless authentication. | |
| Feb 20, 2018 at 21:48 | history | edited | Jeff Ferland♦ | CC BY-SA 3.0 |
Link to relevant question
|
| Feb 17, 2018 at 16:57 | comment | added | Out of Band | Plus having to import a root CA into your browser means that the school wants to spy on you so they can be sure you're not looking at anything you shouldn't be looking at (porn, for example). While I understand the legal arguments behind this, I don't like the approach, especially if the school doesn't explain the consequences of importing a root CA - students are told that they need to install it so the school's content filter doesn't block them when they visit "sites with the green lock icon", but most students won't understand what that implies. | |
| Feb 17, 2018 at 16:47 | comment | added | Out of Band | I'd also counsel against installing a root CA from a company. There are reasons why it's very hard for a new Root CA to get into all the standard browsers. One of them is that they need to prove they take the security of their signing keys very, very seriously. Admittedly a school won't be a very likely target for an attacker, it's more of a "on principle" thing for me, but I seriously doubt your average school has the technical know-how to keep root CA signing keys secure. | |
| Feb 17, 2018 at 14:21 | comment | added | Rory Alsop♦ | @pascal - that is unnecessarily pessimistic. Many schools have better security on their network than companies. | |
| Feb 17, 2018 at 1:42 | comment | added | Out of Band | DON'T accept a root CA from your school. Your school is NOT able to sufficiently secure such a certificate, and if it gets in the wrong hands, the thief can masquerade as any website on the internet without your phone or you noticing. Chances that this happens are very small, but your school should teach you about such risks, not expose you to them. | |
| Feb 16, 2018 at 20:45 | history | answered | Jeff Ferland♦ | CC BY-SA 3.0 |