> If you can do an onboarding SSID, there are many simpler things which can > be done, too. e.g. downloading configuration files from a captive portal.
Yes, but not with a managed Chromebook... My point being that bootstrapping EAP configuration provisioning is not just a problem for BYOD. Steering the conversation back to EAP-FIDO: both it and the captive portal use WebPKI for provisioning, so there's an equivalence that arguably makes my handwringing around WebPKI moot. Perhaps it is an acceptable price to pay for the convenience. _______________________________________________ Emu mailing list Emu@ietf.org https://www.ietf.org/mailman/listinfo/emu
