Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #179713

Captive network account (w/ login redirect) and HSTS

Show all headers | View raw

Hello,

with a basic Debian jessie install and a recent Firefox, I observe the
following:

   [1] Debian has no specific support for detecting captive networks
       (e.g. Android, iOS) and redirecting automatically the browser to
       the captive login page

   [2] launching Firefox on the default page doesn't work (doesn't get
       redirected properly to the login page but fails with a HTTPS
       certificate error), if there is a recent HSTS[*] security
       configuration cache for the default domain page (e.g. google.com)

[1] is not really an issue: I wouldn't like myself that connecting to
a WiFi captive network starts a browser. Also, open captive networks are
messing up, dangerous, a WPA/RADIUS auth would be much better.

However, open captive networks are quite commons in hotels, airports,
parks, etc.  So it cannot be dismissed.

[2] the only fix is to type an URL you know is HTTP, not HTTPS and does
not configure HSTS, and does not support DNSSEC. In my case I used
ptiturl.ch

Maybe this could be in the Debian User manual somehow?

Feel free to contact me if you want help in writing the documentation.

https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Captive network account (w/ login redirect) and HSTS Marc SCHAEFER <schaefer@alphanet.ch> - 2017-04-02 19:10 +0200
  Re: Captive network account (w/ login redirect) and HSTS Brian <ad44@cityscape.co.uk> - 2017-04-02 21:00 +0200
    Re: Captive network account (w/ login redirect) and HSTS Marc SCHAEFER <schaefer@alphanet.ch> - 2017-04-02 21:30 +0200
      Re: Captive network account (w/ login redirect) and HSTS David Wright <deblis@lionunicorn.co.uk> - 2017-04-02 22:30 +0200
        Re: Captive network account (w/ login redirect) and HSTS Marc SCHAEFER <schaefer@alphanet.ch> - 2017-04-03 12:40 +0200
      Re: Captive network account (w/ login redirect) and HSTS <tomas@tuxteam.de> - 2017-04-03 09:30 +0200
  Re: Captive network account (w/ login redirect) and HSTS Darac Marjal <mailinglist@darac.org.uk> - 2017-04-03 15:00 +0200

csiph-web