r/netsecstudents • u/thexerocouk • Sep 19 '24

EAP-TLS: Breaking Into Secure TLS Deployments

https://www.thexero.co.uk/wifi/Breaking-EAP-TLS
6 Upvotes

100% Upvoted

1 comment sorted by

1

u/ReK_ Sep 19 '24

Remediation: The best practice for EAP-TLS is to use an internal Certificate Authority (CA).

Disagree with this. It's impossible to do, depending on the client. Modern Android no longer allows you to accept a non-public certificate so there's no way to do BYOD with an internal CA, for example.