search

coova / coova-chilli

CoovaChilli is an open-source software access controller for captive portal hotspots.
Other
516 stars 258 forks source link

Chilli being hacked upon at next ietf hackathon #347

Open wlanmac opened 7 years ago

wlanmac commented 7 years ago

https://mailarchive.ietf.org/arch/msg/captive-portals/uClWBrXqieye3Y0T5xAPEIBS52c

https://www.ietf.org/registration/MeetingWiki/wiki/doku.php?id=98hackathon

This should result in a pull request :)

wlanmac commented 7 years ago

IETF98 capport hackathon https://www.ietf.org/proceedings/98/slides/slides-98-hackathon-capport-00.pdf

xOneca commented 7 years ago

Very interesting work... Doesn't IEEE 802.11u already try to enable detection of captive portal based authentication on hot-spots?

wlanmac commented 7 years ago

It does... And the capport wg is not trying to replace hotspot 2.0. There are, however, things that can be done to improve the interaction with captive portals. For instance, getting rid of https hijacking, that many vendors are currently doing.

xOneca commented 7 years ago

But REST API aside, what does CAPPORT bring us new wrt IEEE 802.11u? As I understand it, IEEE 802.11u works on layer 2 and CAPPORT on layer 3, but the purpose is the same...

wlanmac commented 7 years ago

(I'd consider 802.11u more Layer 1). The purpose might be the same for the user (wanting Internet), but perhaps not for the venue. CAPPORT is trying to solve different problems than HS2. HS2 is about mutually authenticated access, secure wireless on-boarding, and auto connecting to (trusted) networks. Captive portals will, of course, run next to HS2 to support legacy devices and users without (or not wanting to use) their HS2 credentials. As such, there remain issues with captive portals and user interaction - e.g. the "https" start page problem.

There is also a use-case for CAPPORT solutions working with HS2. Say you have a venue that offers HS2 (and CAPPORT) Internet access to everyone at a low rate limit. But, to get higher speeds you have to do something (at a portal, maybe watch a video, whatever). The CAPPORT ICMP could be used to prompt the UE to present the user with a notification suggesting they go to a portal to upgrade their access.