iOS lets carriers add WiFi networks that you can’t remove or stop from joining

Re:iOS lets carriers add WiFi networks that you can’t remove... by tengwar2 on Wednesday April 05, 2023 @07:47AM (#35452484)

To amplify this: a recognised problem with GSM/GPRS was that although the mobile device authenticated itself to the network. This introduced MITM vulnerabilities. As a response, 3G brought in mutual authentication. Do these managed WiFi networks have mutual authentication? As far as I know, no.

[ Parent | on HN ]

Re:iOS lets carriers add WiFi networks that you can’t remove... by seraphsf on Wednesday April 05, 2023 @11:44AM (#35456060)

Yes, WiFi offload uses the Hotspot 2.0 spec with mutual authentication (EAP-AKA or EAP-SIM typically). Both the phone and the WiFi network will mutually authenticate with the carrier’s Authentication Server.

[ Parent | on HN ]