Thread: Goodbye N9 - a few business disappointments... (WPA enterprise, VPN, Mail ... )
View Single Post
buchanmilne is offline buchanmilne
2012-05-23 , 07:37
Posts: 196 | Thanked: 224 times | Joined on Sep 2010 @ Africa
#21
Originally Posted by don_falcone View Post
Nope, they won't - because its another point of failure / a risk introduced by a 3rd party (remember Diginotar)? They will use self-signed instead, which eliminates this risk.
Let's clarify 'self-signed' as 'Internal Root CA' or 'Enterprise Root CA', as all Root CA certificates are self-signed, but just using 'self-signed' can imply 'self-signed EAP-TLS certificate', which a company worried about security will not consider.

So, what was the supposed strategy for supporting 'Enterprise Root CA certificates'?

Unfortunately, *all* Nokia devices have suffered from this problem, since E61 or before. E72 is still a mission, because the error messages are useless (no 'untrusted certificate' error, no details from the cert presented, nothing, just 'authentication failed', you can only figure it out by noticing that you didn't enter your password yet ...).

After MacOS/iOS, the second easiest to set up IMHO was Maemo (N900), then Android, then desktop Linux (depending on the distro), then Windows 7, then Vista, then Symbian, finally Windows XP.