From nobody Sat Jan 11 16:14:16 2025 X-Original-To: freebsd-desktop@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YVk9p0NpDz5kXM8; Sat, 11 Jan 2025 16:14:22 +0000 (UTC) (envelope-from grahamperrin@gmail.com) Received: from mail-wm1-x32e.google.com (mail-wm1-x32e.google.com [IPv6:2a00:1450:4864:20::32e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YVk9n0Xn7z4kKx; Sat, 11 Jan 2025 16:14:21 +0000 (UTC) (envelope-from grahamperrin@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20230601 header.b=jatHhd88; spf=pass (mx1.freebsd.org: domain of grahamperrin@gmail.com designates 2a00:1450:4864:20::32e as permitted sender) smtp.mailfrom=grahamperrin@gmail.com; dmarc=pass (policy=none) header.from=gmail.com Received: by mail-wm1-x32e.google.com with SMTP id 5b1f17b1804b1-43635796b48so18949045e9.0; Sat, 11 Jan 2025 08:14:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1736612058; x=1737216858; darn=freebsd.org; h=content-transfer-encoding:autocrypt:subject:content-language:from :to:user-agent:mime-version:date:message-id:from:to:cc:subject:date :message-id:reply-to; bh=pMgJESoMXLAEsfLq3OgSSIyQrEJ8Jht332e/9U6OQu8=; b=jatHhd88tPKyPTL5mNCznm13r684RYm5nRlL0xRM1SuJAU7VP6zdOhyBBx6Ph1GjlL GRHDQOqynP5VgUy7eoyqSRTbRpnOuQNMEJIgSdD7RjHMrrT6OGAEdPr0NU/zCVv7TXm/ rqhqhVltttNXAnTU9VeVYb/qK623sK22n63t1PE7jlQsHBfASw143CdhaxdMAGtwm3M9 2LYUpGp+Ixvsj/i3lf0I68lLTLpa2xnZzksknMkgB/F06zQLs7qUBchH942RhJlZtUMB H0vgFMcMVpDHqmuif8b1hRHi5AKftiq57C3WuZF7F5V2Zi2lEL+DQAZbKp40CXzzXnxy IuAA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736612058; x=1737216858; h=content-transfer-encoding:autocrypt:subject:content-language:from :to:user-agent:mime-version:date:message-id:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=pMgJESoMXLAEsfLq3OgSSIyQrEJ8Jht332e/9U6OQu8=; b=SiLvLoawfeaFC0shU20vzlmkkSmc7UmN3F42Pkv+4WejnC8bK0wyjCLRm/4nMXLZgS Og+sK0VEcIWom6l7/4luY52RSaG4euloAuszmZN/M+AUyWKS1gaUcCBJmJjM/m+b9lOj Byg+zJutwBAcjf6P5nlmG70JEneWtCeg1rf2mkcbwE1n8CwJuICeFbEwduzkU7liTPsU Qpij5FAzobdSr4YpD8NwQZAlW3iAwlyRyO3JvGg1+Y8CtKGJ36wvWDFKf9xZIcmDbvOE DHG3IHznc+r1Piaty85inwq+Ye0XAiM4u98sjGofIWvSU0A5i50tv1buK+AABjggvpa9 cTNg== X-Forwarded-Encrypted: i=1; AJvYcCXgJlErW5wjbhzaMyORldJvtqnhqFpdlcahAFZA4QDa6gstuuqMjpJhNYXmFgT4nEfnPMQk1zUsLfCUaaKuhzNfJuhuzw==@freebsd.org X-Gm-Message-State: AOJu0YwNMXXJPgIptaNtSj32HHjXa74KEKu7oJsoyVatyTXDYKFj9hgC vQZkFJ/E8+zEtYWnQEv4Ds6XMNFrGAbB0AuX9zSFZuZD2xVHr6Xp50qCxg== X-Gm-Gg: ASbGncvfVOuzPk9Nv1WDjsJb/XY+80hrqwO5ZXh8VKZh38mw9/+6zhDx1/yZcYdiqFu ghnAxtzty+hLcNX4firGHH3AYLkxkr9grBbuKXXJTyA1NDqdtOykCCRFnQzMZSqqJ8d46krKmfm vmlbpfSWSn0F/erW1l0vjoF0qaXo8w66NZ67fqUUwclIq097nCj2xmIpOwM80X/AscC0rs8qeg3 6AwbVueYhJ1jn8xvBCy05Zs7xlyc0+VJywNWiWufqWfLGp7VHU7bTSiBOhr3SP2ZjlIC8p45FkB Oxt24KHk9ev6WQ== X-Google-Smtp-Source: AGHT+IG4Qg4+Qf1LdNRTRmDG3MFryZXkt9TuitoQ+WMxfdo5EZHZhT8i5ooKcloRYgwJji9RL2qfnw== X-Received: by 2002:a05:600c:3b86:b0:434:f3d8:62db with SMTP id 5b1f17b1804b1-436e9d6963amr88635715e9.2.1736612057781; Sat, 11 Jan 2025 08:14:17 -0800 (PST) Received: from [192.168.1.10] (host-83-67-217-90.as13285.net. [83.67.217.90]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-436ed48f4b2sm73360785e9.24.2025.01.11.08.14.17 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 11 Jan 2025 08:14:17 -0800 (PST) Message-ID: <07e6179b-00de-4eeb-8282-527b477fdccc@gmail.com> Date: Sat, 11 Jan 2025 16:14:16 +0000 List-Id: Using and improving FreeBSD on the desktop List-Archive: https://lists.freebsd.org/archives/freebsd-desktop List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-desktop@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: freebsd-desktop@freebsd.org, freebsd-enterprisewg@freebsd.org From: Graham Perrin Content-Language: en-GB Subject: [EWG] [LDWG] [FBSD_LDWG] (272902) Laptop Project: Wi-Fi privacy/security: clear-text passwords for WPA-EAP e.g. eduroam Autocrypt: addr=grahamperrin@gmail.com; keydata= xsFNBGKYt7ABEAClu83dJ3ZKfVgPOk9YKRv0Z+dl2b88+k9R4vwAmElgguYdKE7yhnQNhhWM v9vi6AFrBMc2oJdVHJ2OrXfwpELBFIgiSMEWNsC4e+Z3HtSajcl+pFZsP7ciiSoycj/w3wIV kAZoVGbhyIbNG7fbCEJ8q81TbfsGypV3bRmbZVvGNecBguYiooBtz2Qht1p3itXMkIA6P9pS YDl+6QddZLyUUAjAnFv2QDoYSHLnaDUWw4oONZsB0SKVu8jMIBh4uJZoYEOvdvc9jQQdOpA2 CAgA6ulfm42Ikr9lKBUUCtjqiWAhJ7iXOTyHAIdR4Mf8alCE6tdTq6dHdIt+GktTY7oYNyL2 3aD3C7I5waU0SFXvJcOMG10QLfwYQMOQoYQ9XJ0U5A28WYiDcylDdUWT7SappP1e1ZMeJWWO y14mxxNzHaJSI4rK8P/p5tp3Q7SSC4k5gMh9zKba3K2ApCWNbVLGvXsJeQkZZNvu70tE81ey AHI5iZcB6D7WaHysBUmsKaEpbcmm1ZThTnGL0SHEl5to5Jab5Fg6O+Cnly5sVz5lX/v8Aosx kKNei7SCVqXOVtteQeGxWbXWbhPgbMyc0Gi3DuxBI/yvJ43k/rJysQlLGLWfJx/UXprwLluC PDK9EvKEB+fD1Z349uzp1sKr3ihpySbyKI8fpudftnAz4EsoCwARAQABzSZHcmFoYW0gUGVy cmluIDxncmFoYW1wZXJyaW5AZ21haWwuY29tPsLBlAQTAQoAPhYhBFk/5bLDBwftvJcvCrdn SG9KGNQLBQJimMMBAhsDBQkFo5qABQsJCAcDBRUKCQgLBRYDAgEAAh4FAheAAAoJELdnSG9K GNQLbHAQAJi998y42bEbq5HmABYovmAEtQj33YSUWyc9QRmAHpN8Er3lTKsgmZcVChB5Fu/d go2oYynDjlVpA7+wiSmg4AG78mOYbg/e19XMhrH0keDKqZXFkU+G7agR0mF09qvpQZ9MTJYZ 2u7FtytZK665UfipOdV8eGn2hFC/WynjUwEzKyryBgbbLAEbfOPeZNry4h2ZPWbtTvx/PE/V X3Vh2oGqYx69DCGz+0xEhy62ZKbkX5SL8LUf/1WViyCVzsHasFxmFxYPWIfBy8ayQ7xapz7M cSXSQyu4oDT4qh9eZiGP9/aAcZKHcV6t9y77JGhUJ/5O1sANKMa3YhgimE+Z86LHYa1IH774 PHj1nAXBwS+Cj/1l/NQoQcyjvOj8zuCsMJVaLMb6B46YsReP4+3yBLpyeBC//t6zWPbgAkWW VjROC0dXUAMTFpnA6NZe3UghG+Nc4fnCLGOhc2nyWFYHIaYV6Hv1ITFSem9DdeNnR1CFm1VM TJ7i7TuqYM+WZTkoUsTf4c46hS/ZNJZSCxh0s9yYr+BYk3XBbd+ElaZ1dJE6cuSVdw15+P2h DnprurxC4byl4YFkn+UAVvQsOgeq6aSHLOHX0weYu1OLoiPYsTdyGhne72+kDhEEdFD5aHdQ PFrbQIrqWLV0a04++0ZwGpNvXtgnWhDdAQJDwGsSSwbLzsFNBGKYt7ABEADRb1tZuh7DPYET 0wK6fe7owbYgM+RfKhmcrGgR2HI9M2q6+0WKF/ITnggWdIW2Ecc4z2boLz/cwvPGCS7/YxZM 61KklGCwuS7q1s04XnHDWHuFxfXQPzAdVmNO3bYoMZbJjHXs6sB2u5ksiwPwaMAWWaGkviSj c5pwvHCiTmX5vH5CBj/Vi+5ESyX38vK4JM5S/m4ouI/6M9biyFgimV+v3vVyCxJCT1gI9g4o GIh1qq5S433b1fihn4yHPf8XOKyBpA/QcwLONViBqJL5nnOxpsh344rNxn2R7CcRzzicOV+e 2IbMem4lwNWQlZKoRotKXZi9LqN5mynSBYqAUdoZum0QinWT9F22B0Qex5PH1zAt9i2W91Vd kcPB3LwkRXj07ycRtsSzpgPA6fLc6AsoWFslHl8kVOO5eJIA4xhjlPa+W8lguQHZ0iX+5uAv 2eAgXR2swADuHPuENNFStmsgAMl8OOOgtq75yA5TpyIzxMuXV9Nmp0VfIaUM/IdLdmxhc1pC c320l5fYMHVLFAReWEbSj2QH8YzWfpXHIegutWWYEbH9SiDXgS9KoKmCJV/Qa+x6/b8y3pOZ vnIbCDaynC2Yr50s8gRa9kb54JE8Z+p8r16U3SEsK3PtUi0RF0e51danCVHrrE6/Hat2XUO/ 6nnYgVgFOrLao6Gh/VMs8wARAQABwsF8BBgBCgAmFiEEWT/lssMHB+28ly8Kt2dIb0oY1AsF AmKYt7ACGwwFCQWjmoAACgkQt2dIb0oY1Av7qg//YjCZg8VXyMzXssgIQpROKKqh5V0UBSQl rM3tq4tWhyg0HVMugQj0Om+iNPsEEOGHkm6tyhHMzlKGpAc/l0iAM+8twIyg44Yo5+DcfFXr OMTbTw9T9jDsWOkOBksxy29iYhgpqpWdDBnhXvrJp/FNAiX8CfzrIOZeFPydDoEiKBEXAxfe a9o5J/JeVnZiUeoiFe7i68nZGsb4JxhPczNfqW12t0Ll5/ibjszg5BgjXiLao0KqbWNh4bS5 CVwH90Or+5qqWgzWPeBiuz+rN2QXE/V/fL44GEj1YKASCqmaiYRgjoRFubz1aq1wCXMXY3Iq d4525rscUgS7HBxbblnyTodUPaamN/2nSzcmE/Pkx8MApDSgZCIhs0RTAg+/AoX4HULV1rSE TQwMrBEQt84Tw5W5rHsvXKr4ZEsJUpbPLWYTISsp23nHR+vZtL/Ug+OWCmHC7X7D21xk/xVJ 4sA1RLJBKdCHtnyA4Unv/kNS1KVGxHnITVyw1a71QJADu4qsdtM5u6CyYUhqhM1oseWtV6j+ Qi8KC/G4C3AgZf06fe2fVl42z2grTabL4bC6FQXMwTX2dsm5NakWjUCmUL8uwsQE7ZA4zKxo EYI1YV9q1birpzncYRupr1qnMoggMUHWq0IBYshFQrEO8PeVUZBw7/GfAeh3argdw2Qu748T Cyw= Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4YVk9n0Xn7z4kKx X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.99 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601]; MIME_GOOD(-0.10)[text/plain]; XM_UA_NO_VERSION(0.01)[]; RCVD_TLS_LAST(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_TRACE(0.00)[0:+]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; FROM_HAS_DN(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; TO_DN_NONE(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MLMMJ_DEST(0.00)[freebsd-desktop@freebsd.org]; RCVD_VIA_SMTP_AUTH(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; FREEFALL_USER(0.00)[grahamperrin]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::32e:from] I'd like the Foundation to have an issue (story) for this in its Laptop Project, . In for wpa_supplicant.conf(5), the example for eduroam uses a clear text password. I'm not aware of a method to have the password saved without clear text. The password should be truly private, for my eyes only. Not for the eyes of any other administrator of an installation of FreeBSD. was mentioned in an Enterprise Working Group (EWG) context in FreeBSD Discord in August 2023, . Thanks