[Strint-attendees] Captive Portal BoF, an invitation to STRINT Workshop folk...

Dear STRINT workshop people,

There will be a BoF held at the IETF meeting in Prague to discuss
Captive Portals and designing a better way to interact with them.

Captive Portals have some STRINT / pervasive monitoring implications,
including the fact that many of the current captive portals
interception techniques that are indistinguishable from MitM
attacks[0].
Many of the protections that are being developed to mitigate pervasive
monitoring (e.g ubiquitous encryption, dprive, etc) break captive
portal's ability to intercept are redirect users to the payment page
-- unfortunately this leads to a poor user experience, and the user
disabling useful security features / blindly clicking "Accept" on
unknown TLS cert, etc. The sorts of information that Captive Portals
collect may also have privacy implications, etc.

Barry suggested that I reach out to you and invite you to come to the
BoF - it is called 'CAPtive PORTal interaction' (CAPPORT) and will be
meeting Wednesday Afternoon session II.

We also have a mailing list where we are discussing this:
https://www.ietf.org/mailman/listinfo/captive-portals

Sorry for the interruption,
W

[0]: Because they *are* MitM... :-)

-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf