0

This is concerning an android device (not sure if that information helps, since Apple works differently).

When logging into a wifi network, there will be sections that ask for different information. One is to choose a certificate. The options for a certificate can vary between networks. Choosing a specific certificate would require downloading the certificate and a warning will appear saying the actions can be monitored.

For the option to “use system certificates”, what does that mean? Does that mean no certificate is being installed when connecting to that wifi network (I am just using the certificates my device already had prior to attempting to login to the wifi)?

I know certificates are used to make sure connection is secured mostly from hackers inspecting traffic. Not sure how that works when choosing the option of using system certificates.

2 Answers 2

3

Using system certificates means that the certificate of the WiFi must be signed by a CA that is trusted for everything on the system, i.e. also in the browser. This means the publicly-trusted CA we usually expect to see when surfing the web, i.e. certificates from Let's Encrypt and similar. There might also be a company-specific CA installed here.

It is common, though, that the certificate for the WiFi is company-specific and not signed by a public CA, and that the whole purpose of this certificate is to be used for authenticating the WiFi Access Point to the client - in which case, it makes sense to configure it for the specific WiFi and not include it in the system certificates. In general, this is the more secure option since it is more specific to what the client should expect. But since it needs the user to explicitly install a new certificate it is also the less user-friendly option.

3
-1

The system certificate is more about authentication. In other words, you rightfully got on to the wifi, so your cert is used from there on out to authenticate you from a hacker. The certs on the other side are separate.

1
  • The question never mentions Let's Encrypt, so I removed that part. I'm really struggling to see how this answers the question. How does the system cert differ from using a specific cert? "The certs on the other side are separate." -- what 'side'? I think this needs a lot more explaining.
    – schroeder
    Sep 11, 2022 at 8:37

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .