In the osx keychain I was browsing certificates that my school forces me to trust and came upon an intermediate certificate authority that was signed by an untrusted user, I believe that would be me and was wondering what the certificate trust would default to when "no value specified" is what trusting ssl certificates is set to? I am also wondering what type of certificates this intermediate certificate could issue/sign?
The images below are of the intermediate root ca, as a side note this ca has already been used to sign certificates for x.509 basic policy and extensible authentication protocol(EAP) which makes sense since this is used to connect to wifi.
Listed below are some of the questions I had about how my school's wifi is set up and how I can protect myself
- Can the intermediate root ca which my school forces me to trust man in the middle my system by signing/issuing ssl certificates?
- can changing the certificate the intermediate CA certificate has issued trust to "Never trust" to everything but EAP and X.509 would help?
- Will revoking the intermediate CA's trust after the school wifi has given me an EAP certificate to connect to the wifi. allow me to both use school wifi and not have the school man in the middle my connection? and if so how I could go about doing this on IOS?
- Finally I was wondering what someone else would do in my position with mobile data prices in Toronto being so high?
- what the school was asking of me was a reasonable compromise between security and functionality? –