Timeline for My school wants me to download an SSL certificate to connect to WiFi. Can I just avoid doing anything private while on the WiFi?
Current License: CC BY-SA 4.0
22 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Sep 25 at 12:44 | answer | added | bbaassssiiee | timeline score: 0 | |
Aug 30 at 14:47 | comment | added | ysdx | @Martin, webscreen.lgfl.org.uk/UserManual/overview.html | |
Aug 30 at 0:03 | comment | added | Martin | @coagmano I Googled "WebScreenCert" but all I see is a link to this SE post; what exactly did you find? | |
Aug 29 at 18:00 | answer | added | alekop | timeline score: 2 | |
Aug 29 at 12:50 | answer | added | Serge Ballesta | timeline score: 4 | |
Aug 28 at 22:06 | comment | added | browsermator | I'm fine with "never ever do this" as advice just because you can't be sure of the source of the cert. Even if you knew this did come from the school, you can't be sure that they would keep the private key secure. (school security when so many crazy kids are running around with potential access must be a nightmare) Btw, you can easily tell if it is used as MITM by checking the certs of the sites you visit. If they're all this same cert, then it's in that position and could be used to intercept traffic (but probably isn't because of liabilities involved with doing that) | |
Aug 28 at 20:44 | answer | added | R.. GitHub STOP HELPING ICE | timeline score: 4 | |
Aug 28 at 16:38 | comment | added | user71659 | This is good training if you ever want to get a job in financial services, government, aerospace and defense, and medical industries. Learn never to do anything personal on your work computer. | |
Aug 28 at 14:54 | comment | added | schroeder♦ | @Fattie "never" is a strange word to use when dealing with risk. This situation is neither strange nor unusual. And given the risk-mitigating measures the OP suggests, why make this such a hard line? What risks are there? | |
Aug 28 at 14:51 | answer | added | Questor | timeline score: 7 | |
Aug 28 at 14:40 | comment | added | Questor | So... Is this certificate handed to you by the schools admin? Or is it being provided by the "school's" wifi. | |
Aug 28 at 11:46 | review | Close votes | |||
Aug 28 at 14:56 | |||||
Aug 28 at 11:38 | comment | added | Fattie | Great question OP. I think sometimes with security issues a concise response is in order, and my response would be NEVER EVER DO THIS. It's a total PITA but, just accept that essentially "your school does not have wifi", however inconvenient that is. | |
Aug 28 at 11:28 | comment | added | sleske | This needs more information. "Downloading a certificate" by itself will do nothing, just create a file on disk. However, they most likely want you to do something with that certificate - import it into your browser, use it for authentication... . What exactly are you supposed to do with the cert? | |
Aug 28 at 8:26 | comment | added | Reznik | "I go to a secondary school and want to use my Macbook Air to type out long essays." You don't need internet for that, right? | |
Aug 28 at 5:15 | comment | added | coagmano | If you google WebScreenCert, you can see it's used to MITM (decrypt, examine content, re-encrypt) | |
Aug 27 at 20:44 | history | became hot network question | |||
Aug 27 at 15:47 | comment | added | ysdx | There are two possibilities: 1) this certificate is used for MITM interception ; 2) this certificate is used only for authenticating to a authentication server for initiating the Wifi connection. You should try to see which king of certificate this is: Is this a CA certificate ? Is this a non-CA certificate associated with a name such as "radius.myschool.org", "wifi.myschool.org". | |
Aug 27 at 15:42 | answer | added | ysdx | timeline score: 85 | |
Aug 27 at 15:12 | answer | added | kontextify | timeline score: 24 | |
S Aug 27 at 12:42 | review | First questions | |||
Aug 27 at 15:45 | |||||
S Aug 27 at 12:42 | history | asked | Grace McCarthy | CC BY-SA 4.0 |