Re: ESSID ietf-v6only at IETF 100 - security

Alexandre Petrescu <alexandre.petrescu@gmail.com> Tue, 14 November 2017 07:30 UTC

Return-Path: <alexandre.petrescu@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6FDB12948D for <ipv6@ietfa.amsl.com>; Mon, 13 Nov 2017 23:30:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.633
X-Spam-Level:
X-Spam-Status: No, score=-2.633 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_MED=-2.3, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EQlaJ-vHQYPF for <ipv6@ietfa.amsl.com>; Mon, 13 Nov 2017 23:30:55 -0800 (PST)
Received: from oxalide-smtp-out.extra.cea.fr (oxalide-smtp-out.extra.cea.fr [132.168.224.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C3B312945F for <ipv6@ietf.org>; Mon, 13 Nov 2017 23:30:54 -0800 (PST)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id vAE7UqRK004496 for <ipv6@ietf.org>; Tue, 14 Nov 2017 08:30:52 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 9B40E201241 for <ipv6@ietf.org>; Tue, 14 Nov 2017 08:30:52 +0100 (CET)
Received: from muguet1.intra.cea.fr (muguet1.intra.cea.fr [132.166.192.6]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 925D4200808 for <ipv6@ietf.org>; Tue, 14 Nov 2017 08:30:52 +0100 (CET)
Received: from [132.166.84.93] ([132.166.84.93]) by muguet1.intra.cea.fr (8.15.2/8.15.2/CEAnet-Intranet-out-1.4) with ESMTP id vAE7Upfg004654 for <ipv6@ietf.org>; Tue, 14 Nov 2017 08:30:52 +0100
Subject: Re: ESSID ietf-v6only at IETF 100 - security
To: ipv6@ietf.org
References: <acd854c7-8bd2-781e-6d0d-b15bb62c48e2@gmail.com> <CAHw9_iKoYrfuf_UjBeVw+=cCD9Kuc4+zPPsR1kqrxAAza59qXg@mail.gmail.com> <88d14301-f417-da89-a526-954f44149af8@gmail.com> <30891ba2-01e7-70ec-4fc3-1a32038dde12@gmail.com>
From: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Message-ID: <6d39ece3-2a00-bd8d-cc97-25eeaf4ebeaf@gmail.com>
Date: Tue, 14 Nov 2017 08:30:08 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <30891ba2-01e7-70ec-4fc3-1a32038dde12@gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: fr
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/BYE0jaL1PCAU5znVzffLGMuI0t0>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Nov 2017 07:30:57 -0000

Le 14/11/2017 à 08:26, Brian E Carpenter a écrit :
> On 14/11/2017 19:59, Alexandre Petrescu wrote:
>>
>>
>> Le 14/11/2017 à 07:24, Warren Kumari a écrit :
>> [...]
>>
>>> ​Nope. We have the legacy SSIDs because some people apparently had
>>> issues connecting to encrypted SSIDs (because of old OS / broken
>>> wpa_supplicant, etc) - this wasn't issue with certs, but rather
>>> providing a solution for those who are unable to do WPA enterprise /
>>> have old cards, etc.
>>
>> Well - sorry, but all these reasons seem light for me.
>>
>> I have Windows 7 which is not old.  Updated regularly from Microsoft and
>> from employer IT.
> 
> My Windows 7 box is a ~5 years old Samsung and has no problem such as you report.
> It is patched up to date as far as I know. I seem to think I had to authenticate
> the first time I joined ietf-nat64, but that was no surprise.
> ...> Rather, I suspect there is a preference at the Access Point to favorise
>> Macintosh variations of WiFi Clients, rather than Windows.
> 
> I have seen no evidence of that. I expect it is a problem with the
> particular WiFi device and driver built into your Windows box.
> Go and see the friendly NOC staff.
> https://tickets.meeting.ietf.org/wiki/IETF100network#HelpDesk

I went and they updated by WiFi driver.  It worked during that IETF.

No it no longer works.  Maybe it's because my IT rolled me back into the 
earlier driver.  If so, they must have their reasons for doing so.

I go many hotspots and currently only IETF rejects my card.

I may need to check that again.

Alex

> 
>      Brian
> 
>      Brian
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>