So i've seen the new passpoint SSID's popping up at just about every optimum wifi hotspot around me and did a little research on it and found surprisingly little about it from optimum themselves, but found an old thread here.
I think the consensus was that these passpoint systems are usually set up in a way that there is an a companion app that you install that handles the initial connection/login/certificate install, something OOL doesn't seem to have (at least yet) for this.
I read that on android you could connect by manually setting it up like this:
EAP Method: PEAP
Phase 2 authentication: MSCHAPV2
CA certificate: Do Not Validate
Identity: "your Optimum ID username"
Anonymous Identity: (leave blank)
Password: "your Optimum ID password"
IP settings: DHCP
Essentially bypassing the certificate check to log in.
Now that of course doesn't seem like a good idea, especially when your plugging in your credentials, but i'm not actually 100% sure how passpoint systems work so I don't want to just assume.
If you can be 100% sure that the first access point you connect/log in to is a legitimate OOL access point, is there any benefit to connecting to it? No benefit? All potential security risks?
Without a valid certificate would connecting to it open up your device to the risk of jumping onto an illegitimate optimum_passpoint SSID later on (same as current optimum wifi) but this time handing it your login credentials? Or is that information only passed through on the initial connection?
Thanks for any insight on this.
↧