pacoii t1_iy3rhe7 wrote on November 28, 2022 at 3:10 PM

Reply to comment by gfaust_mudd in Why did our school wanted us to install this? Can somebody explain what is the purpose? by 8046Ile

Unless the school is requiring them to use their Wi-Fi, why is it unethical? Most employers will require a similar Profile when using a personal device on a corporate network, for security purposes.

gfaust_mudd t1_iy3sita wrote on November 28, 2022 at 3:18 PM

Wi-Fi is password protected and you agree to terms if/when you log into it. Profiles can allow unrestricted access and are generally used in managed environments. I’m yet to see a company that uses this method vs VPN for personal device use. And note I’m not talking about a phone your company provides you, I’m talking about your phone on their networks

CrypticMocha t1_iy40itn wrote on November 28, 2022 at 4:15 PM

It is extremely common practice to have employees sign agreements and install profiles on BYOD (bring your own device) endpoints.

PADFTGW t1_iy45buw wrote on November 28, 2022 at 4:48 PM

That it is common, won’t say it’s normal to do. They can get full access to your device by such profiles. You better can use your own mobile provider to access the internet instead of the company WiFi. Even without a installed profile they can track all your internet traffic.

jjeroennl t1_iy5g83p wrote on November 28, 2022 at 9:57 PM

I’m pretty sure it’s illegal in the European Union, if your employer requires this they will need to provide the phone, laptop or tablet. Its also not allowed for employers to make you install an app on your personal phone for example.

Its even more not allowed to monitor network traffic, then you will be violating both employee rights and the GDPR.

Dutch source: https://www.everphone.com/nl/blog/scheiden-van-gegevens-bij-mobiele-telefoon-van-de-zaak/

pacoii t1_iy3sooo wrote on November 28, 2022 at 3:19 PM

Many companies use Profiles. I’ve worked at them, lol!

cyberentomology t1_iy4a96y wrote on November 28, 2022 at 5:21 PM

Certificate authentication to access enterprise Wi-Fi networks is extremely common. Products like ClearPass exist for this exact use case. The “password” for a WiFi network (pre shared key) is an encryption key, not an authentication or authorization method, and is only typically used on small-scale personal networks.

This is completely separate from VPN which allows remote secured access to internal company networks. Certificate authentication to the network provides authentication, authorization, and accounting, as well as robust encryption of the wireless link.