sys-net phones home to fedoraproject.org for captive portal detection

[hdevalence]

When connecting to some WiFi networks, e.g., open networks, sys-net phones home to fedoraproject.org:

sys-net NetworkManager[551]: <info>  connectivity: check for uri 'http://fedoraproject.org/static/hotspot.txt' returned status '302 Moved Temporarily'; assuming captive portal.

It would be good to discuss whether this is desired behaviour and whether there's a better way to deal with captive portals in Qubes (e.g., testing random domains).

[hdevalence]

Another interesting idea would be to integrate captive portal detection with a Qubes DispVM system, so that when a captive portal is detected, Qubes could launch Firefox in a DispVM to do the login. Maybe that should be a different ticket?

[hdevalence]

Another interesting idea would be to integrate captive portal detection with a Qubes DispVM system, so that when a captive portal is detected, Qubes could launch Firefox in a DispVM to do the login. Maybe that should be a different ticket?

[marmarek]

As for connectivity check, you can disable it by removing NetworkManager-config-connectivity-fedora package. Indeed it may be a good option to not install it at all by default.

As for captive portal handling, it it interesting idea, worth a separate ticket and/or discussion on qubes-devel mailing list.

[marmarek]

As for connectivity check, you can disable it by removing NetworkManager-config-connectivity-fedora package. Indeed it may be a good option to not install it at all by default.

As for captive portal handling, it it interesting idea, worth a separate ticket and/or discussion on qubes-devel mailing list.

[0x27]

Perhaps it might be better to see what it is that the Subgraph people are doing with their Captive Portal detector/dealwith contraption and integrate that?

Integrating their automatic MAC changer might be another cool thing to do as an optional NetVM accessory for bonus privacy.

[0x27]

Perhaps it might be better to see what it is that the Subgraph people are doing with their Captive Portal detector/dealwith contraption and integrate that?

Integrating their automatic MAC changer might be another cool thing to do as an optional NetVM accessory for bonus privacy.

[cfcs]

"Captive portal detection" is inherently going to connect back to /something/. I think we should make it an install-time option (before we enable the network).

[cfcs]

"Captive portal detection" is inherently going to connect back to /something/. I think we should make it an install-time option (before we enable the network).