Technical advisories
eduroam Deployment Considerations on Wi-Fi Certified 6E
may, 2022
Wi-Fi Certified 6E brings significant change, among others in relation to security questions and the lack of backward ...
eduroam + OpenRoaming End-User Information
february, 2022
What is eduroam? eduroam is a global service that provides free, secure Wi-Fi roaming connectivity for the R&E...
OpenRoaming and eduroam – Useful Information for eduroam National Roaming Operators (NROs)
february, 2022
eduroam is a member of the Wireless Broadband Alliance (WBA) and a pioneer member of the OpenRoaming federation service...
OpenRoaming and eduroam – Useful Information for eduroam Identity Providers and Service Providers
frebruary, 2022
eduroam is a member of the Wireless Broadband Alliance (WBA) and a pioneer member of the OpenRoaming federation service ...
Mutual Authentication
october, 2020
The eduroam team is aware of a vulnerability report originally from WizCase and republished from numerous secondary...
Fragmentation and Aggregation Attacks (FragAttacks) and eduroam
may 2021
Recently, the Fragmentation and aggregation attacks vulnerability (FragAttacks) has come to light about the risk of...
eduroam® and Wi-Fi CERTIFIED WPA3™ Security
june 26, 2018
The Wi-Fi Alliance® announcement of Wi-Fi CERTIFIED WPA3™ is mostly focused on WPA3-Personal which isn’t of...
Key Reinstallation Attack and WPA2
october 18, 2017
Recently, the news of the Key Reinstallation Attack (KRACK) vulnerability allowing the decryption of WPA2 messages...
RADIUS Attribute Issues regarding RFC5580
may 1, 2011
RADIUS Attribute Issues regarding RFC5580 (Operator-Name and others) with several RADIUS servers (including Microsoft...
Warning: Do not use web logins for eduroam
february 3, 2009
The eduroam Operations Team wishes to draw your attention to the fact that you should not use your eduroam credentials...
Recommendation regarding internationalised domain names for eduroam realms
january 27, 2009
Recent standardisation efforts in the Internet Engineering Task Force (IETF) have yielded the possibility of using ...
Cipher suite selection for eduroam Service Providers
november 6, 2008
Summary of issue A weakness has been found in TKIP network encryption (WPA/TKIP and WPA2/TKIP). Risk level is currently ...